[BitTorrent] Back to Merkle Hash Trees...
arachnid at notdot.net
Mon Feb 7 16:20:17 EST 2005
On 7/02/2005, at 10:43 AM, Joseph Ashwood wrote:
>> Why not?
>> If I have file A, calculate the merkle tree and root hash rh(A), give
>> you rh(A), how can you give me file B with rh(B) = rh(A)?
> Depends on the hash used. If you use SHA-0 yes, if you use MD5 yes,
> SHA-1 is
> the next in that series and is getting close, SHA-256/384/512 already
> weaknesses in this area shown against them.
> Actually in an effort to get this as good as possible I have to admit
> my proposal is not optimally secure either. While it does not suffer
> the preimage order attack of the original it does suffer from a first
> preimage attack, to correct this is fairly easy change my proposal
As far as I'm aware, there have been no preimage attacks found in MD5,
SHA-0, or SHA-1. See http://www.cryptography.com/cnews/hash.html.
Trying to build a merkle tree implementation assuming fundamental
weaknesses in the hash you're using seems a bad idea. If the hash is
broken, all bets are off.
Yahoo! Groups Links
<*> To visit your group on the web, go to:
<*> To unsubscribe from this group, send an email to:
BitTorrent-unsubscribe at yahoogroups.com
<*> Your use of Yahoo! Groups is subject to:
More information about the BitTorrent