Comments on: Herding Hash Functions http://deadhacker.com/2006/02/01/herding-hash-functions/ research repository of cyphunk://nathan.fain Fri, 19 Feb 2010 21:04:45 +0000 http://wordpress.com/ hourly 1 By: how many blogs before I empty out? » Blog Archive » Formal aspects of mobile code security - Chapter 5 http://deadhacker.com/2006/02/01/herding-hash-functions/#comment-4 how many blogs before I empty out? » Blog Archive » Formal aspects of mobile code security - Chapter 5 Wed, 22 Feb 2006 13:31:37 +0000 http://cyphunk.wordpress.com/2006/02/01/herding-hash-functions/#comment-4 [...] The interest in this thesis is due to its reference in Heard Hash Functions and many other papers relating to hash algorithms. In Chapter 5 a fixed point attack against hash algorithms is discussed. Methods are given for overcoming the appended message length specified in Merkle-Damgård (cache) constructed hash functions. [...] [...] The interest in this thesis is due to its reference in Heard Hash Functions and many other papers relating to hash algorithms. In Chapter 5 a fixed point attack against hash algorithms is discussed. Methods are given for overcoming the appended message length specified in Merkle-Damgård (cache) constructed hash functions. [...]

]]> By: cyphunk http://deadhacker.com/2006/02/01/herding-hash-functions/#comment-2 cyphunk Wed, 22 Feb 2006 10:11:49 +0000 http://cyphunk.wordpress.com/2006/02/01/herding-hash-functions/#comment-2 Dan: nice. demonstrates the attack in a more visual manner. I am not familiar with systems that verify pages or js using a hash but I'm sure there are. btw, check your spam filter, you should have a mail from me concerning the idea we discussed at the CCC. Dan: nice. demonstrates the attack in a more visual manner. I am not familiar with systems that verify pages or js using a hash but I’m sure there are.

btw, check your spam filter, you should have a mail from me concerning the idea we discussed at the CCC.

]]> By: Dan Kaminsky http://deadhacker.com/2006/02/01/herding-hash-functions/#comment-1 Dan Kaminsky Wed, 22 Feb 2006 05:07:57 +0000 http://cyphunk.wordpress.com/2006/02/01/herding-hash-functions/#comment-1 Thanks for the mention -- just as a note, I extended the attack to websites here: http://www.doxpara.com/t1.html http://www.doxpara.com/t2.html http://www.doxpara.com/research/md5/confoo.pl Thanks for the mention — just as a note, I extended the attack to websites here:

http://www.doxpara.com/t1.html
http://www.doxpara.com/t2.html

http://www.doxpara.com/research/md5/confoo.pl

]]>