<<< Date Index >>>     <<< Thread Index >>>

Re: SHA-1 broken



Hi,

In much the same way if the original text was 'I owe you 1 million dollars' and the 
collision text was 'sdf86*&6989h,mni lkj99j' its not significant.
I think that kind of collision affects the "non-repudiation" property of digital signatures. In court, A produces message "I owe you 1 million dollars" signed by B. B says, "No... I signed a random string provided by A to prove my identity, I've been setup to sign this colliding message".

Regards,

Paul

--
Paul Johnston, GSEC
Internet Security Specialist
Westpoint Limited
Albion Wharf, 19 Albion Street,
Manchester, M1 5LN
England
Tel: +44 (0)161 237 1028
Fax: +44 (0)161 237 1031
email: paul@xxxxxxxxxxxxxxxx
web: www.westpoint.ltd.uk