Moving Git past SHA-1
Moving Git past SHA-1
Posted Feb 28, 2017 17:21 UTC (Tue) by Tara_Li (guest, #26706)In reply to: Moving Git past SHA-1 by farnz
Parent article: Moving Git past SHA-1
Posted Feb 28, 2017 18:28 UTC (Tue)
by farnz (subscriber, #17727)
[Link]
There are two reasons to not simply extend the SHA-1 construction:
That second point is a doozy - you expect 280 operations (as it's 160 bits long - a 256 bit hash would need 2128 operations) to break SHA-1, but the attack reduces that to around 263 operations. You may be able to extend it to 280 operations by extending the hash to (say) 200 bits, but an attacker building on the recent work could then reduce it back down to 263 operations, and you've got to pay the cost of a new hash again.
Posted Feb 28, 2017 18:41 UTC (Tue)
by mlankhorst (subscriber, #52260)
[Link]
Moving Git past SHA-1
Moving Git past SHA-1
