Bugtraq mailing list archives

Re: SHA-1 broken

From: Brian May <brian () unearthed org>
Date: Fri, 18 Feb 2005 15:54:41 -0800

Michael Silk wrote:

Michael,

 But wouldn't it render a login-based hashing system resistant to the
current hashing problems if it is implemented something like:

 --
 result = hashFunc1( input + hashFunc1(input) + salt )

<snip>

wouldn't that create an infinite loop?

Current thread:

Re: SHA-1 broken, (continued)
- - - Re: SHA-1 broken dullien (Feb 19)
    - Re: SHA-1 broken Tollef Fog Heen (Feb 19)
    - Re: SHA-1 broken Denis Jedig (Feb 21)
- Re: SHA-1 broken Steve Friedl (Feb 17)
- Re: SHA-1 broken Jonathan G. Lampe (Feb 17)
- RE: SHA-1 broken Scovetta, Michael V (Feb 17)
  - RE: SHA-1 broken Frank Knobbe (Feb 21)
- RE: SHA-1 broken Michael Silk (Feb 19)
  - Re: SHA-1 broken exon (Feb 19)
    - Re: SHA-1 broken Peter J. Holzer (Feb 21)
  - Re: SHA-1 broken Brian May (Feb 19)
- Re: SHA-1 broken Michael Silk (Feb 19)
  - Re: SHA-1 broken Anatole Shaw (Feb 19)
    - Re: SHA-1 broken Michael Silk (Feb 19)
    - Re: SHA-1 broken peeon+securityfocus (Feb 21)
    - Re: SHA-1 broken Peter Jeremy (Feb 21)
- Re: SHA-1 broken securityfocus (Feb 19)
  - Re: SHA-1 broken Damian Menscher (Feb 21)
  - Re: SHA-1 broken Paul Johnston (Feb 21)
- Re: SHA-1 broken Michael Silk (Feb 21)
  - Re: SHA-1 broken exon (Feb 21)