Slashdot Mirror
SHA-1 Broken
Nanolith writes "From Bruce Schneier's weblog: 'SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing. The research team of Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu (mostly from Shandong University in China) have been quietly circulating a paper announcing their results...'" Note, though, that Schneier also writes "The paper isn't generally available yet. At this point I can't tell if the attack is real, but the paper looks good and this is a reputable research team."
A marketing guy has a bright idea:
"Hey Bob, I was in the airport the other day and these two geeks were talking all about SHA-1. Said they read about it on Slashdot, and a Chinese research team was spending an awful lot of time working on it. We should definitely put this SHA-1, whatever it is, into the next release of our products. Send a memo to the development managers, and call our guy over at Gartner."
Fascism trolls keeping me up every night. When I starts a preachin', he HITS ME WITH HIS REICH!
I just want to say "What's UP?" All of this NONSENSE that popped up a while ago about MD5 being "harmful some day" is really PALE in comparison to "SHA-1 has a theoretical attack" let alone "SHA-1 has been broken." I want to give proper acknowledgement for all of the people who try really hard to stay in the ACTUAL world.
--- Nothing clever here: move along now...
This may come as news to you, but people who deal with cryptography already knew about this before your precious slashdot caught the story.
The experience most of you retards have with SHA-1 is the fact that it's what's used to copy-protect your XBOX games.
Man, I remember why I only read this site via RSS feed.
Losers. Every single one of you.
- Eat it.
s/comical/clueless/
"Uh, yeah, I meant to do that." Right. Sure. Hahahahahahahaha.
Like you also meant to misspell "realized" and "have" and "don't"? At least you got the right fscking version of "it's".
I'm skeptical to believe this at best. China's government has a less-than-perfect record on telling the truth, but a very good record about
knowing what to say to achieve a desired result.
For example, China's current stance on giving Hong Kong greater democratic freedom is that this will happen when the people elect Beijing's candidates (so if you elect the people Beijing was going to appoint, the people will be allowed to "choose" all the seats).
That said, there's a clear motive behind their making people believe the hash has been cracked: they simply don't want people to allow people privacy. If they say they've cracked it, a portion of the anti-Communist folk in China may believe this and thus the government will have stopped their communications for essentially free with propaganda. And since I hate to just try and blow smoke, I'm predicting that the paper will be top secret, unpublishable, and thus unvarifiable.
-- Political fascism requires a Fuhrer.