SHA-1 von chinesischem Team geknackt

[jutta]

SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing.

The research team of Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu (mostly from Shandong University in China) have been quietly circulating a paper describing their results:

* collisions in the the full SHA-1 in 2**69 hash operations, much less than the brute-force attack of 2**80 operations based on the hash length.

* collisions in SHA-0 in 2**39 operations.

* collisions in 58-round SHA-1 in 2**33 operations.

quelle: bruce schneier http://www.schneier.com/blog/archives/2 ... roken.html
diskussion der konsequenzen:
http://msgs.securepoint.com/bugtraq/
http://slashdot.org/index.pl?issue=20050215
auf deutsch: http://www.heise.de/newsticker/meldung/56507

[M@rio]

Ebenfalls von http://slashdot.org/index.pl?issue=20050215

Let's say you have 2^20 (1048576) machines. Let's say each can do 2^20 hashes per second (this is optimistic). Then it will take you 2^29 seconds to find a hash collision-- this is about 17 years.

Also noch kein Grund zur Panik.
...aber trotzdem bedenklich.