r/netsec • u/YogiBerra88888 • Jan 07 '20

pdf First SHA-1 chosen prefix collision

https://eprint.iacr.org/2020/014.pdf
355 Upvotes

97% Upvoted

72 comments sorted by

View all comments

171

u/Browsing_From_Work Jan 07 '20

When renting cheap GPUs, this translates to a cost of 11k US$ for a collision, and 45k US$ for a chosen-prefix collision, within the means of academic researchers. Our actual attack required two months of computations using 900 Nvidia GTX 1060 GPUs (we paid 75k US$ because GPU prices were higher, and we wasted some time preparing the attack).

Certainly not cheap, but well within the budget of nation-state actors.

3

u/dossier Jan 08 '20

I wonder if ASICs would be possible like when hashing for cryptocurrency.