1.

What Are Pseudo-collisions?

Answer»

Pseudocollisions are collisions for the COMPRESSION function that lies at the heart of an ITERATIVE hash function. While collisions for the compression function of a hash function might be useful in constructing collisions for the hash function itself, this is not normally the case. While pseudocollisions might be viewed as an unfortunate property of a hash function, a pseudocollision is not equivalent to a collision, and the hash function can STILL be SECURE. MD5 is an example of a hash function for which pseudocollisions have been discovered and yet is still considered secure.

Pseudocollisions are collisions for the compression function that lies at the heart of an iterative hash function. While collisions for the compression function of a hash function might be useful in constructing collisions for the hash function itself, this is not normally the case. While pseudocollisions might be viewed as an unfortunate property of a hash function, a pseudocollision is not equivalent to a collision, and the hash function can still be secure. MD5 is an example of a hash function for which pseudocollisions have been discovered and yet is still considered secure.



Discussion

No Comment Found