Re: hash tags

On Mar 8, 2013, at 4:12 PM, PJ Eby <[email protected]> wrote:

> On Fri, Mar 8, 2013 at 2:52 PM, Noah Kantrowitz <[email protected]> wrote:
>> MD5 is _not_ acceptable for anything security related and we shouldn't be adding anything that increases our dependence on it. MD5's only use in the packaging world is to make people who forget that TCP has its own checksums feel all warm and fuzzy that there hasn't been _accidental_ download corruption.
> 
> So, you're saying that someone has found a second-preimage attack
> against MD5 that's more efficient than the current 2**127 threshold
> established in 2009?
> 
> "Anything security related" is pretty broad.  Out of the many classes
> of attacks on hashes, AFAIK the only class that's relevant to PyPI is
> second preimage attacks,  i.e. one where the attacker has the original
> file and the hash, and must construct a new file that produces the
> same hash value.

Relevant to PyPI is pretty broad, and when you're developing a secure system you need to look past what is ok *today* and design for the next 5, 10, or 20 years. So even if there's no attack that can directly allow replacing the target file with a new one, continuing to utilize it is bad. It has a number of weaknesses which do not install confidence in its future security meanwhile there are a number of other hashes which _do_.

Unless you'd rather be trying to replace hashes everywhere once it's already completely broken.

> 
> Did you have some other type of hash attack in mind?  And in either
> case, do you have a referent for the attack complexity?
> _______________________________________________
> Catalog-SIG mailing list
> [email protected]
> http://mail.python.org/mailman/listinfo/catalog-sig


-----------------
Donald Stufft
PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA

_______________________________________________
Catalog-SIG mailing list
[email protected]
http://mail.python.org/mailman/listinfo/catalog-sig

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
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=c/hq
-----END PGP SIGNATURE-----