Slashdot Mirror

← Back to Stories (view on slashdot.org)

GnuPG Short ID Collision Has Occurred.

Posted by Unknown on from the 32-bits-ought-be-enough-for-anyone dept.

kfogel writes "Asheesh Laroia now has two GPG different keys with the same short ID (70096AD1) circulating on keyservers. One of them is an older 1024-bit DSA key, the other is a newer 4096-bit RSA key. Oops. Asheesh argues that GPG's short IDs are too short to be the default anymore — collisions are too easy to create: he did it on purpose and openly, but others could do it on purpose and secretly. More discussion (and a patch by dkg) are in this bug report."

3 of 110 comments (clear)

  1. Re:Above post is ignorant by Bill+Currie · · Score: 1, Offtopic

    And that matters, why?

    --

    Bill - aka taniwha
    --
    Leave others their otherness. -- Aratak

  2. I just can't lose!? (Re:Above post is ignorant) by robbak · · Score: -1, Offtopic

    Hmm. I make a dumb post, it gets modded up once. I make a post that corrects my dumb post, and it gets modded +5. Just how does one LOSE karma around here?

    --
    Prediction for end of Universe #42: Fencepost error in Quantum_bogosort.cpp
  3. Re:Above post is ignorant by deniable · · Score: -1, Offtopic

    "You must be new around here." Woosh.