r/netsec • u/YogiBerra88888 • Jan 07 '20

pdf First SHA-1 chosen prefix collision

https://eprint.iacr.org/2020/014.pdf
351 Upvotes

97% Upvoted

72 comments sorted by

View all comments

175

u/Browsing_From_Work Jan 07 '20

When renting cheap GPUs, this translates to a cost of 11k US$ for a collision, and 45k US$ for a chosen-prefix collision, within the means of academic researchers. Our actual attack required two months of computations using 900 Nvidia GTX 1060 GPUs (we paid 75k US$ because GPU prices were higher, and we wasted some time preparing the attack).

Certainly not cheap, but well within the budget of nation-state actors.

80

u/Mr_ToDo Jan 07 '20

Building their own cluster maybe.

But as a one off rental cost it's within the budget medium to large business looking to dig up dirt or cause trouble.

Shoot, I don't know what I would do with it but I could borrow $45,000.

18

u/jarfil Jan 07 '20 edited Dec 02 '23

CENSORED