Make your own colliding PDFs: https://alf.nu/SHA1
-
Hmm. I hope this can't be easily used to attack git repositories' integrity. Has git got any plans to upgrade from SHA1?
The published collision cannot be used to attack Git because Git prefixes blobs with a header.
-
-
Someone could use the same approach and spend the $100k to compute a Git-targeted prefix collision though.
-
They have plans to fix it but IMO they're at >5 years too late. Seems short-term they'll use the mitigated SHA1?
End of conversation
New conversation -
-
-
So I take it SVN doesn't add a prefix? https://shattered.io
-
Correct. It seems what is affected is a deduplication feature in SVN.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.