On Mon, Sep 16, 2013 at 05:46:26PM +0200, Raimo Niskanen wrote:
> On Mon, Sep 16, 2013 at 02:25:58PM +0000, Christian Weisgerber wrote:
> > Raimo Niskanen <[email protected]> wrote:
> > 
> > > A resembling application is the Git version control system that is
> > > based on the assumption that all content blobs can be uniquely
> > > decribed by their 128-bit SHA1 hash value.
> >                     ^^^^^^^^^^^^^^^^^
> > ... 160-bit SHA1 hash...
> 
> And now I just read on the Wikipedia page for SHA-1 that a theoretical
> weakness was discovered in 2011 that can find a collision with a 
> complexity of 2^61, which gives a probability of 10^-18 still
> 1000 times better than a hard drive of 10^-15.

A little knowledge is a dangerous thing.

"weakness" in a cryptographic setting doesn't mean *anything* if
you're using it as a pure checksum to find out accidental errors.

Reply via email to