You can take the two sets of 320 bytes that were published, append *anything* to both sets, and they will still have the same hash.
So many people are getting the SHA1 story wrong. With the collision that Google released, *anyone* can create colliding PDFs for *free*.
-
-
-
Due to the way the prefix was crafted and the way the PDF format works, this allows you to make two PDF files with different contents.
- Show replies
New conversation -
-
-
I was expecting a write-up from you TBH ;)
- Show replies
-
-
-
Indeed. Have some colliding PDFs! https://pbs.twimg.com/media/C5axj3oVMAARvAX.jpg:large …
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
That's how collisions work. Once the state is the same, if you add the same data, you get the same new state.
-
That's only for Merkle–Damgård constructions, right?
End of conversation
New conversation -
-
-
They look different, but have the same data. The trick to make that work is in the collision/header blocks.
-
Basically both PDFs have both sets of data and the collision block selects one to be displayed.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.