Hacks: Smashing SHA-1 to Shambles for less than 1BTC

grarpamp grarpamp at gmail.com
Wed Dec 30 21:16:20 PST 2020


> someone could warm some GPUs and really make a mess of commits to public repos.

Which repos will they target for this fun?

> https://github.com/bk2204/git/blob/transition-stage-4/Documentation/technical/hash-function-transition.txt

Yes yet now with more 2ae12e56
https://github.com/gig/git/blob/transition-stage-4/Documentation/technical/hash-function-transition.txt

> if by detect, you mean "die":
> https://github.com/git/git/blob/master/sha1dc_git.c#L21

Appears this general thing was integrated now...
https://github.com/git/sha1collisiondetection

Projects will weasel from adopting sha-256 by stating
this handy nag-die forces projects to add needed
documentation to their code in order to avoid collision,
kills two... collision and docs, with one line of #.


More information about the cypherpunks mailing list