BugTraq
Re: SHA-1 broken Feb 19 2005 09:53AM
securityfocus microtechnical co uk (3 replies)
Re: SHA-1 broken Mar 01 2005 02:32PM
Pavel Machek (pavel ucw cz)
Re: SHA-1 broken Feb 21 2005 11:02AM
Paul Johnston (paul westpoint ltd uk)
Hi,

>In much the same way if the original text was 'I owe you 1 million dollars' and the collision text was 'sdf86*&6989h,mni lkj99j' its not significant.
>
>
I think that kind of collision affects the "non-repudiation" property of
digital signatures. In court, A produces message "I owe you 1 million
dollars" signed by B. B says, "No... I signed a random string provided
by A to prove my identity, I've been setup to sign this colliding message".

Regards,

Paul

--
Paul Johnston, GSEC
Internet Security Specialist
Westpoint Limited
Albion Wharf, 19 Albion Street,
Manchester, M1 5LN
England
Tel: +44 (0)161 237 1028
Fax: +44 (0)161 237 1031
email: paul (at) westpoint.ltd (dot) uk [email concealed]
web: www.westpoint.ltd.uk

[ reply ]
Re: SHA-1 broken Feb 20 2005 05:35PM
Damian Menscher (menscher uiuc edu)


 

Privacy Statement
Copyright 2010, SecurityFocus