From: Linus Torvalds <torvalds@osdl.org>
Date: Mon, 28 Aug 2006 21:23:08 GMT
Subject: Re: Starting to think about sha-256?
Message-ID: <Pine.LNX.4.64.0608281421120.27779@g5.osdl.org>
In-Reply-To: <m3r6z0ef95.fsf@defiant.localdomain>



On Mon, 28 Aug 2006, Krzysztof Halasa wrote:
> 
> Well, conflicting files will most probably have the same size,
> like with MD5 cases :-)

That's only true for the much easier injection case where you generate 
_both_ files together.

>From an external git hash-attack standpoint, that's not a very useful 
case. It's much more useful if you can make a new file that has a hash 
that matches a given old file, and in that case, the filelengths are 
likely not the same.

			Linus