[BitTorrent] SHA-1 broken

Bill Cox bill at viasic.com
Wed Feb 16 19:52:16 EST 2005

> Incorrect. In order to make this attack work, you need to break the
> hash's weakly collision-free property. The attack being mentioned is
> against the strongly collision-free property.
> The above will still take 2^159 operations on average. Nick Johnson's
> explanation gets it right. Someone creating a torrent can make a torrent
> with a pair of blocks that both verify with 2^69 work (and note that
> neither of the pair can be chosen, you generate 2^69 of them and two of
> them match). Someone who isn't the creator still has to attack the weakly
> collision-free property and do 2^159 operations.
> The strongly collision-free property is important for digital signatures,
> where the original content may not of been created by the signer. This
> isn't yet a problem for BT, just cause for concern.

I think I get it.  The Chinese are just saying that in 2^69 random
blocks, typically there will be two that collide, and not that I can
find a random block that matches a specific signature.

Thanks for the clarification.


Yahoo! Groups Links

<*> To visit your group on the web, go to:

<*> To unsubscribe from this group, send an email to:
    BitTorrent-unsubscribe at yahoogroups.com

<*> Your use of Yahoo! Groups is subject to:

More information about the BitTorrent mailing list