𝕂𝕀𝕃𝕃 π•„π”»πŸ demystifying hash collisions

Comments, chapters, ... Slides Search
Loading Click here to add:
Subscribe to notifications

When subscribed to notifications, an email will be sent to you for all added annotations.

Your user account has no email address.

Information on this media

225 views

You probably think when reading this: “MD5 is already broken!”. Yes, it’s possible to create two different files with the same MD5 in a few seconds, or make two arbitrary files get the same MD5 in a few hours, but it has some limited impact.

Since MD5 is considered broken by experts, it’s now out of scope for research, and yet these two attacks are probably not scary enough so developers still think that MD5 is good to index or verify files.

This talk is a joint effort between Marc Stevens and Ange Albertini, associating the best known cryptographic attacks with new file format manipulations, and will present instant collisions of many common file types, and help you understand how it’s done and their impact, which hopefully will convince everyone to kill MD5 for good.

SHA1 is covered too, but the impact of existing attacks is more limited at this stage.

Speaker

Ange Albertini

Bio

Author of Corkami

Creation date: July 1, 2019
Speakers: Ange Albertini
License: CC BY-SA v4
Links:

Other media in the channel "2019"