[BitTorrent] SHA-1 broken

Marcel Popescu mdpopescu at yahoo.com
Wed Feb 16 09:07:41 EST 2005

> From: Bill Cox [mailto:bill at viasic.com]

> What other choices are there out there that are still considered strong?

SHA-256, SHA-512.

> So, we could extend the Merkle hash tree concept to include multiple
> root values, perhaps 3 if we're really paranoid?

Nah. MD5 and SHA-1 should be enough, even if both are broken, and they're
both reasonably fast. (The chance of finding two block with the same hash
for both algorithms is very likely zero.) That is, if there's some reason
not to use SHA-256.


No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: 2/14/2005

Yahoo! Groups Links

<*> To visit your group on the web, go to:

<*> To unsubscribe from this group, send an email to:
    BitTorrent-unsubscribe at yahoogroups.com

<*> Your use of Yahoo! Groups is subject to:

More information about the BitTorrent mailing list