Author Topic: Google Demonstrates First Ever SHA-1 Hash Collision  (Read 28 times)

0 Members and 1 Guest are viewing this topic.

Offline Quizmaster

  • Flying Nurse
  • Seasonal Competition Team
  • *
  • Posts: 23301
    • Smokey's Security Forums
  • .: Surf Queen
Google Demonstrates First Ever SHA-1 Hash Collision
« Reply #1 on: February 24, 2017, 01:42:22 AM »
Google Demonstrates First Ever SHA-1 Hash Collision
23 February 2017, 11:34 pm

Google researchers, alongside with academics, have demonstrated that nothing is impossible by producing two different documents that have the same SHA-1 hash signatures. And that's a big deal. 

Why, you ask? Well, it has everything to do with the fact that SHA-1 is used across the Internet. It's used for HTTPS certificates used to protect your browsing and in Git repositories. It is used to prove that data, whether it's emails, PDFs, website certificates, source code and so on, have not been tampered with by hackers of any kind. 

Well, Google has managed to prove that it is, in fact, possible to create a hash collision by altering a PDF without changing its SHA-1 hash value. This means that people could be tricked into thinking the altered document was actually the original one, which is worrisome. 

"Today, 10 years after of SHA-1 was first introduced, we are announcing the first practical technique for generating a collision. T... (read more)

Source: Softpedia News / Security

>> To obtain the full Softpedia Security News article, click the link in the first post line <<

 


Except where otherwise stated, all content, graphics, banners and images included © 2006 - 2018 Smokey Services™ -- All rights reserved
Design board graphics, banners and images by DSTM & PseFrank

This site does not store profiling-, tracking-, third-party and/or any other non-essential cookie(s) on client computers and is fully compliant with the EU ePrivacy Directive
Smokey's does not use any Web Analytics/Analysis Service, and also does not use any browser fingerprinting techniques



Smokey's also provides free fully qualified Log / Malware Analysis & Removal Help and System Health Checks