|
|
Subscribe / Log in / New account

Moving Git past SHA-1

Moving Git past SHA-1

Posted Feb 28, 2017 17:21 UTC (Tue) by Tara_Li (guest, #26706)
In reply to: Moving Git past SHA-1 by farnz
Parent article: Moving Git past SHA-1

But can that "before the heat death of the Universe" be recovered by simply making the SHA-1 hash longer? Or is the crack so bad that the length of the hash effectively doesn't matter any more?


to post comments

Moving Git past SHA-1

Posted Feb 28, 2017 18:28 UTC (Tue) by farnz (subscriber, #17727) [Link]

There are two reasons to not simply extend the SHA-1 construction:

  1. The "heat death of the universe" depends on an attacker having to perform all the operations we expect them to. A break (such as the current break for SHA-1) allows an attacker to get the result they need without doing all the operations we expect them to. Thus, we get a shorter hash by using a new, unbroken construction like SHA-2 or SHA-3, rather than by extending SHA-1 out far enough that even with the attacker's ability to skip operations, they can't feasibly compute colliding hashes under any circumstances.
  2. Once one break is found, it's likely that someone will build on this work to reduce the difficulty of the break. Thus, if you extend the broken construction, someone is quite likely to find a way to simply not bother with the extended bit.

That second point is a doozy - you expect 280 operations (as it's 160 bits long - a 256 bit hash would need 2128 operations) to break SHA-1, but the attack reduces that to around 263 operations. You may be able to extend it to 280 operations by extending the hash to (say) 200 bits, but an attacker building on the recent work could then reduce it back down to 263 operations, and you've got to pay the cost of a new hash again.

Moving Git past SHA-1

Posted Feb 28, 2017 18:41 UTC (Tue) by mlankhorst (subscriber, #52260) [Link]

This would effectively be the same as moving to a new hash, so might as well move to a newer, more secure hash.


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds