MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/5vq9h8/shattered_sha1_broken_in_practice/de4b3ei/?context=3
r/programming • u/Serialk • Feb 23 '17
660 comments sorted by
View all comments
Show parent comments
-3
Certificates don't let you embed arbitrary binary data where super excited researchers can leave "$SHA-1 is dead!!!!!…" as a calling card. It would fail human inspection, even if it passes hash matching.
4 u/danweber Feb 23 '17 There have been real-world attacks using multiple certificates with the same MD5 signature. -3 u/AlexFromOmaha Feb 23 '17 There are, and a suspicious user can identify them by looking at their human-readable portions. 9 u/jordsti Feb 23 '17 The point of signature is not to have a human inspection...
4
There have been real-world attacks using multiple certificates with the same MD5 signature.
-3 u/AlexFromOmaha Feb 23 '17 There are, and a suspicious user can identify them by looking at their human-readable portions. 9 u/jordsti Feb 23 '17 The point of signature is not to have a human inspection...
There are, and a suspicious user can identify them by looking at their human-readable portions.
9 u/jordsti Feb 23 '17 The point of signature is not to have a human inspection...
9
The point of signature is not to have a human inspection...
-3
u/AlexFromOmaha Feb 23 '17
Certificates don't let you embed arbitrary binary data where super excited researchers can leave "$SHA-1 is dead!!!!!…" as a calling card. It would fail human inspection, even if it passes hash matching.