[linux_var] sha1 collision

To: linux_var - LUG di Varese e Provincia Mailing List <talking@ml.linuxvar.it>

Subject: [linux_var] sha1 collision

From: Lorenzo Lobba <lorenzo.lobba@gmail.com>

Date: Thu, 23 Feb 2017 21:45:41 +0000

Authentication-results: linuxvar.it; dkim=pass reason="2048-bit key; unprotected key" header.d=gmail.com header.i=@gmail.com header.b=Akc6ZS52; dkim-adsp=pass; dkim-atps=neutral

Delivered-to: diegor@tiscali.it

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ml.linuxvar.it; s=mail; t=1487886354; bh=+wEO8ipfE7czZ8HaSOrEHkw4R5I1xYE6aT9lnMCMNWQ=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe:Reply-To; z=From:=20Lorenzo=20Lobba=20<lorenzo.lobba@gmail.com>|Date:=20Thu,= 2023=20Feb=202017=2021:45:41=20+0000|To:=20linux_var=20-=20LUG=20d i=20Varese=20e=20Provincia=20Mailing=20List=20<talking@ml.linuxvar .it>|Subject:=20[linux_var]=20sha1=20collision|List-Id:=20linux_va r=20-=20LUG=20di=20Varese=20e=20Provincia=20Mailing=20List=0D=0A=2 0<talking.ml.linuxvar.it>|List-Unsubscribe:=20<http://ml.linuxvar. it/cgi-bin/mailman/options/talking>,=0D=0A=20<mailto:talking-reque st@ml.linuxvar.it?subject=3Dunsubscribe>|List-Archive:=20<http://m l.linuxvar.it/pipermail/talking/>|List-Post:=20<mailto:talking@ml. linuxvar.it>|List-Help:=20<mailto:talking-request@ml.linuxvar.it?s ubject=3Dhelp>|List-Subscribe:=20<http://ml.linuxvar.it/cgi-bin/ma ilman/listinfo/talking>,=0D=0A=20<mailto:talking-request@ml.linuxv ar.it?subject=3Dsubscribe>|Reply-To:=20linux_var=20-=20LUG=20di=20 Varese=20e=20Provincia=20Mailing=20List=0D=0A=20<talking@ml.linuxv ar.it>; b=aRKz0zBzWGuGae3L7PiBYm0BC+tFeAwCJxEg4vQMQP+73EcCqthg3ZPquPUdFv0jp BnwjFAEoO6bZxdaYDZ2TWdZmZGOOkU9V83qgQDRM4tddnnOrz4wGjwoFJEEQ9FCkGy Rr7pHWWQJ+qyBKTy6x4jnAic5e38lcZQgCsgOFfA=

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=4w7M6OLQbhuJotMQyRbF0fCKaaNgRB889RtfcMtiTbY=; b=Akc6ZS52Ve1duxVJkMXkflYPCFvS0vYVU9zm5Lcn5iWcSih/wmLBcrIFXEGnkd7I9b DykhbpbApn5G5zbZqbimtGsoeEWuSHwU3ciiBMEqfZ+OHOMS2OrlXcWddZ/4VH3mcXf7 No6LBzcdk5w6mZstcuHjI+vY8NbGGwKFxszKeg3uE+z1fKpFDO1UdiGs7A6ZgTeGUd/m a2hUXlJpKutWldUuKwT0s7YgEqACHd/uVpnhYCdZCLY4iCZ3g3dKyFRZDgqRwbFsN2Ap 74GHA/C9dLRmSuDvDoGprJSvhXz9bOG3nlI5l1gTfwR05zL5JJzCFRE65FH55KQ49HH4 FZNA==

List-archive: <http://ml.linuxvar.it/pipermail/talking/>

List-help: <mailto:talking-request@ml.linuxvar.it?subject=help>

List-id: linux_var - LUG di Varese e Provincia Mailing List <talking.ml.linuxvar.it>

List-post: <mailto:talking@ml.linuxvar.it>

List-subscribe: <http://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking>, <mailto:talking-request@ml.linuxvar.it?subject=subscribe>

List-unsubscribe: <http://ml.linuxvar.it/cgi-bin/mailman/options/talking>, <mailto:talking-request@ml.linuxvar.it?subject=unsubscribe>

Reply-to: linux_var - LUG di Varese e Provincia Mailing List <talking@ml.linuxvar.it>

Sender: "Talking" <talking-bounces@ml.linuxvar.it>

Per chi non sapesse cosa è sha1

(https://it.wikipedia.org/wiki/Secure_Hash_Algorithm)

Google e i ricercatori del cwi hanno scoperto la prima collisione sha1, cioè hanno generato due file pdf diversi, ma con stesso sha1.

E' ora di usare altri algoritmi di hash. (Anche se era buona cosa averlo già fatto)

https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html

Ciao,

Lorenzo

_______________________________________________ Talking mailing list Talking@ml.linuxvar.it http://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking