Slashdot Mirror

← Back to Stories (view on slashdot.org)

GnuPG Short ID Collision Has Occurred.

Posted by Unknown on from the 32-bits-ought-be-enough-for-anyone dept.

kfogel writes "Asheesh Laroia now has two GPG different keys with the same short ID (70096AD1) circulating on keyservers. One of them is an older 1024-bit DSA key, the other is a newer 4096-bit RSA key. Oops. Asheesh argues that GPG's short IDs are too short to be the default anymore — collisions are too easy to create: he did it on purpose and openly, but others could do it on purpose and secretly. More discussion (and a patch by dkg) are in this bug report."

3 of 110 comments (clear)

  1. Re:Above post is ignorant by gparent · · Score: 5, Funny

    Who the fuck do you think you are? Some of us are trying to get page hits by posting dumb stories on Slashdot here!

  2. Re:Let's face it by PPH · · Score: 5, Funny

    want to trust your mechanic with pulling your teeth out?

    Not again.

    --
    Have gnu, will travel.
  3. Re:Let's face it by AmiMoJo · · Score: 4, Funny

    Dude you just missed a really good opportunity for a car analogy!

    --
    const int one = 65536; (Silvermoon, Texture.cs)
    SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC