Slashdot Mirror


Meaningful MD5 Collisions

mrogers writes "Researchers at Ruhr-Universität Bochum have found a way to produce MD5 collisions between human-meaningful documents. This could be used to obtain a digital signature on one document and then transfer it to another. The same technique is theoretically applicable to other hash functions based on the Merkle-Damgård structure, such as SHA-1." From the article: "Recently, the world of cryptographic hash functions has turned into a mess. A lot of researchers announced algorithms ("attacks") to find collisions for common hash functions such as MD5 and SHA-1 (see [B+, WFLY, WY, WYY-a, WYY-b]). For cryptographers, these results are exciting - but many so-called 'practitioners' turned them down as 'practically irrelevant'."

6 of 312 comments (clear)

  1. First post by xintegerx · · Score: -1, Offtopic

    The problem with MD5 is that it is possible that two files will have the same MD5, but highly unlikely. Instead of worrying about this, we should worry about our kids.

  2. Completely OT by Anonymous Coward · · Score: -1, Offtopic

    Look what i just read
    http://www.cbsnews.com/stories/2005/06/10/world/ma in700979.shtml

    (AP) Israel is considering using an unusual new weapon against Jewish settlers who resist this summer's Gaza Strip evacuation - a device that emits penetrating bursts of sound that leaves targets reeling with dizziness and nausea.

    Security forces could employ the weapon to overcome resistance without resorting to force, their paramount aim. But experts warn that the effects of prolonged exposure are unknown.

    The army employed the new device, which it dubbed "The Scream," at a recent violent demonstration by Palestinians and Jewish sympathizers against Israel's West Bank separation barrier.

    Protesters covered their ears and grabbed their heads, overcome by dizziness and nausea, after the vehicle-mounted device began sending out bursts of audible, but not loud, sound at intervals of about 10 seconds. An Associated Press photographer at the scene said that even after he covered his ears, he continued to hear the sound ringing in his head.

    because it wont get posted by the editors untill next week. Does this not scare ths shit out of every person alive?

  3. Security Through Obscurity by Trolling4Columbine · · Score: 0, Offtopic

    "Encryption" is just another flawed method of concealing information behind obfuscated algorithms. History has proven time and again that such techniques are inevitably compromised, and therefore useless.

    My suggestion: if you want your data to be protected that well, don't transfer it over electronic media.

    --
    Socialism: A feeling of discontent and resentment caused by a desire for the possessions or qualities of another.
  4. huh? by illtron · · Score: -1, Offtopic

    I find it hard to believe that even Slashdot readers find this interesting.

    --
    Slashdot: 24 hours behind every other site or your money back!
  5. really? by Anonymous Coward · · Score: -1, Offtopic

    4EBADA6A2AF2BCBA53DED1D7B414F081

  6. OT - Repy to tagline troll by orasio · · Score: -1, Offtopic

    Capitalism is fueled by Greed. Socialism is fueled by Envy. Which is your sin?


    Capitalism is fueled by greed, and it works, at least it works if people are greedy.
    Socialism doesn't work if people are envious.
    Socialism wasn't created by people who were envious. Usually socialists (not just people who call themselves that) are people who might like their place in society, but would rather be a piece of a better society. In general the "sin" of socialists is to not understand that human nature makes socialism a much harder task than it was though, it might even be impossible.