Re: SHA1 hash safety
- From
- Ingo Molnar <mingo@elte.hu>
- Date
- Apr 16, 2005, 12:31 UTC
- Message-ID
- <20050416123155.GA19908@elte.hu>
- In-Reply-To
- <Pine.LNX.4.62.0504160519330.21837@qynat.qvtvafvgr.pbz>
* David Lang <david.lang@digitalinsight.com> wrote:
Show 13 quoted lines
> this issue was raised a few days ago in the context of someone > tampering with the files and it was decided that the extra checks were > good enough to prevent this (at least for now), but what about > accidental collisions? > > if I am understanding things right the objects get saved in the > filesystem in filenames that are the SHA1 hash. of two legitimate > files have the same hash I don't see any way for both of them to > exist. > > yes the risk of any two files having the same has is low, but in the > earlier thread someone chimed in and said that they had two files on > their system that had the same hash..
you can add -DCOLLISION_CHECK to Makefile:CFLAGS to turn on collision checking (disabled currently). If there indeed exist two files that have different content but the same hash, could someone send those two files?
Ingo