Advanced

Security elite hash out encryption alternatives

Posted by dave on · 2 comments
NewsForge
Mail this story
Print this story

At this week's Cryptographic Hash Workshop in Washington, DC, the giants of the cryptography field met to discuss the problem of our disintegrating hash algorithms. Today, the security of the algorithms that protect our online banking and digital signature systems is crumbling, and no one has a simple answer to the problem.

Full Story

  Nav
» Read more about: Story Type: News Story

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

By a friend of mine, Valorie Henson- and they laughed at her.

They're not laughing now!

"An Analysis of Compare-by-hash"

Abstract

Recent research has produced a new and perhaps dangerous technique for uniquely identifying blocks that I will call compare-by-hash. Using this technique, we decide whether two blocks are identical to each other by comparing their hash values, using a collision-resistant hash such as SHA-1. If the hash values match, we assume the blocks are identical without further ado. Users of compare-by-hash argue that this assumption is warranted because the chance of a hash collision between any two randomly generated blocks is estimated to be many orders of magnitude smaller than the chance of many kinds of hardware errors. Further analysis shows that this approach is not as risk-free as it seems at first glance. http://infohost.nmt.edu/~val/review/hash.html"

Didn't i read somewhere that SHA-1 has a fundemental flaw in it some while ago?

Edit: Ignore this post just read the article, I was forgetting i wasn't on Slashdot :)

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post