Chinese crack SHA-1

Powered by SC Magazine
 

The Secure Hash Algorithm (SHA-1), previously thought of as virtually unbreakable, has been cracked by a research team from China.

The team, from Shandong University, the Chinese Academy of Sciences and Shanghai Jiaotong University, has proven SHA-1, used in the generation of digital signatures, can be compromised by a supercomputer.

"This attack builds on previous attacks on SHA-0 and SHA-1, and is a major, major cryptanalytic result," said cryptographic expert Bruce Schneier in his weblog. "It pretty much puts a bullet into SHA-1 as a hash function for digital signatures."

It was believed that some 2^80 operations would be needed to achieve a match (known as a collision). The research proves that a collision can be achieved at the much lesser figure of 2^69. A number that, although large, is breakable with today's computer technology.

Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu, who cracked SHA-1, last year released a paper discussing ways to compromise MD-4, MD-5, HAVAL and RIPEM-D, a group of other well-known algorithms.

www.schneier.com

Copyright © SC Magazine, US edition


Tags
 
 
 
Top Stories
Don’t mention digital disruption to David Whiteing
Buzzwords don’t curry favour with CBA's new CIO - it’s all just innovation to him.
 
Content, cost & constant innovation: How Foxtel plans to take on Netflix
Nell Payne inhabits the “brave new world of blue strings and networking”. Just don't ask her to put a TV screen on your microwave.
 
Westpac fires starting pistol on core banking upgrade
St George readies itself for move to Celeriti.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Should Optus make a bid for iiNet?

   |   View results
Yes
  43%
 
No
  57%
TOTAL VOTES: 614

Vote