| |||||||||||||
The monoculture of meritocracyThe monoculture of meritocracyPosted Dec 10, 2012 12:51 UTC (Mon) by ekj (guest, #1524)In reply to: The monoculture of meritocracy by ThinkRob Parent article: Crowding out OpenBSD
If you're paranoid about it, you nest ciphers (with unrelated keys!)
You use AES( k2, BLOWFISH( k1, plaintext)) which is secure aslong as *either* blowfish *or* AES survives.
You can do the same thing with hashes, but you need to concatenate or interleave them rather than nest them - the result is a hash that is as large as the sum of the two -- and that remains secure aslong as atleast once of the hashes is secure. (and *possibly* secure even if both hashes are broken)
Even someone who -can- find sha1 and md5 collisions *might* have a harder time finding two distinct documents that collide in both md5 and sha1. (yes I'm aware that md5 has been broken)
(Log in to post comments)
|
|||||||||||||