Cryptographic Hashing Function (SHA-1 and MD5) - Revision history

Kaschner at 02:20, 9 December 2010

2010-12-09T02:20:53Z

← Older revision		Revision as of 02:20, 9 December 2010
Line 55:		Line 55:
	*With MD5 it is very easy to produce collisions. (a collision is production of the same hash value from two different inputs)		*With MD5 it is very easy to produce collisions. (a collision is production of the same hash value from two different inputs)

	*With SHA-1 collisions ~~have been found, but~~ are extremely difficult to accomplish (~~theoretical~~, none have actually been found yet). Knowing that it would take massive amounts of time to find a collision with the full 80 steps of hashing, beginning in 2007 The Graz University of Technology created a computing platform named BOINC. Its purpose was to create a SHA-1 collision. Two years later it was abandoned due to no progress. ~~lol :-)~~		*With SHA-1 collisions are extremely difficult to accomplish (theoretically can happen, none have actually been found yet). Knowing that it would take massive amounts of time to find a collision with the full 80 steps of hashing, beginning in 2007 The Graz University of Technology created a computing platform named BOINC. Its purpose was to create a SHA-1 collision. Two years later it was abandoned due to lack of progress.

	==References==		==References==

Kaschner at 02:16, 9 December 2010

2010-12-09T02:16:47Z

← Older revision		Revision as of 02:16, 9 December 2010
Line 1:		Line 1:
	=What is a Cryptographic Hash Function?=		=What is a Cryptographic Hash Function?=
	A ~~crytographic~~ hashing function is a deterministic procedure that takes a block of code and returns a fixed bit string.		A cryptographic hashing function is a deterministic procedure that takes a block of code and returns a fixed bit string.

	Two widely used ~~hasing~~ functions used today are MD5 and SHA-1		Two widely used hashing functions used today are MD5 and SHA-1

	==SHA-1==		==SHA-1==
Line 26:		Line 26:

	[[File:ron_rivest.jpg\|middle]]		[[File:ron_rivest.jpg\|middle]]
	<- Ron Rivest ~~lol~~		<- Ron Rivest


Line 44:		Line 44:
	*MD5 is less secure than SHA-1. SHA-1 is more resistant to brute force attacks.		*MD5 is less secure than SHA-1. SHA-1 is more resistant to brute force attacks.

	*MD5 processes faster than SHA-1, because it has 64 steps in its algorithm ~~compaired~~ to SHA-1's 80 steps.		*MD5 processes faster than SHA-1, because it has 64 steps in its algorithm compared to SHA-1's 80 steps.

	*MD5 is heavily used in software to check file integrity (Md5sum) and is commonly used to store passwords.		*MD5 is heavily used in software to check file integrity (Md5sum) and is commonly used to store passwords.

	*SHA-1 and SHA-2 and required by law for some US ~~Goverment~~ applications.		*SHA-1 and SHA-2 and required by law for some US Government applications.

	*For Security purposes SHA-1 is ~~preffered~~ over MD5 due to perceived security flaws, although none have been proven.		*For Security purposes SHA-1 is preferred over MD5 due to perceived security flaws, although none have been proven.


	*With MD5 it is very easy to produce collisions. (a collision is production of the same hash value from two different ~~imputs~~)		*With MD5 it is very easy to produce collisions. (a collision is production of the same hash value from two different inputs)

	*With SHA-1 collisions have been found, but are extremely difficult to accomplish (theoretical, none have actually been found yet). Knowing that it would take massive amounts of time to find a collision with the full 80 steps of hashing, beginning in 2007 The Graz University of Technology created a computing platform named BOINC. Its purpose was to create a SHA-1 collision. Two years later it was abandoned due to no progress. lol :-)		*With SHA-1 collisions have been found, but are extremely difficult to accomplish (theoretical, none have actually been found yet). Knowing that it would take massive amounts of time to find a collision with the full 80 steps of hashing, beginning in 2007 The Graz University of Technology created a computing platform named BOINC. Its purpose was to create a SHA-1 collision. Two years later it was abandoned due to no progress. lol :-)

	==~~Refrences~~==		==References==
	[http://en.wikipedia.org/wiki/SHA1 SHA-1 Wiki]		[http://en.wikipedia.org/wiki/SHA1 SHA-1 Wiki]

Kaschner at 23:18, 8 December 2010

2010-12-08T23:18:03Z

← Older revision		Revision as of 23:18, 8 December 2010
Line 61:		Line 61:

	[http://en.wikipedia.org/wiki/MD5 MD5 Wiki]		[http://en.wikipedia.org/wiki/MD5 MD5 Wiki]

			[[File:Bob_dole.jpg\|middle]]

Kaschner at 22:45, 8 December 2010

2010-12-08T22:45:34Z

← Older revision		Revision as of 22:45, 8 December 2010
Line 44:		Line 44:
	*MD5 is less secure than SHA-1. SHA-1 is more resistant to brute force attacks.		*MD5 is less secure than SHA-1. SHA-1 is more resistant to brute force attacks.

	*MD5 processes faster than SHA-1, because it has 64 steps in its algorithm ~~comapaired~~ to SHA-1's 80 steps.		*MD5 processes faster than SHA-1, because it has 64 steps in its algorithm compaired to SHA-1's 80 steps.

	*MD5 is heavily used in software to check file integrity (Md5sum) and is commonly used to store passwords.		*MD5 is heavily used in software to check file integrity (Md5sum) and is commonly used to store passwords.

Kaschner at 22:44, 8 December 2010

2010-12-08T22:44:48Z

← Older revision		Revision as of 22:44, 8 December 2010
Line 26:		Line 26:

	[[File:ron_rivest.jpg\|middle]]		[[File:ron_rivest.jpg\|middle]]
			<- Ron Rivest lol

Kaschner at 22:43, 8 December 2010

2010-12-08T22:43:54Z

← Older revision		Revision as of 22:43, 8 December 2010
Line 12:		Line 12:

	*SHA-1 is the most used version of SHA today. It is currently used in many applications and security protocols.		*SHA-1 is the most used version of SHA today. It is currently used in many applications and security protocols.


	[[File:nsa.jpg\|middle]]		[[File:nsa.jpg\|middle]]
Line 22:		Line 23:

	*Its used in many security applications, and is great for checking file integrity.		*Its used in many security applications, and is great for checking file integrity.


	[[File:ron_rivest.jpg\|middle]]		[[File:ron_rivest.jpg\|middle]]

Kaschner at 22:43, 8 December 2010

2010-12-08T22:43:39Z

← Older revision		Revision as of 22:43, 8 December 2010
Line 13:		Line 13:
	*SHA-1 is the most used version of SHA today. It is currently used in many applications and security protocols.		*SHA-1 is the most used version of SHA today. It is currently used in many applications and security protocols.

	[[File:~~NSA~~.jpg\|middle]]		[[File:nsa.jpg\|middle]]

Kaschner at 22:43, 8 December 2010

2010-12-08T22:43:04Z

← Older revision		Revision as of 22:43, 8 December 2010
Line 12:		Line 12:

	*SHA-1 is the most used version of SHA today. It is currently used in many applications and security protocols.		*SHA-1 is the most used version of SHA today. It is currently used in many applications and security protocols.

			[[File:NSA.jpg\|middle]]

Kaschner at 22:40, 8 December 2010

2010-12-08T22:40:01Z

← Older revision		Revision as of 22:40, 8 December 2010
Line 20:		Line 20:

	*Its used in many security applications, and is great for checking file integrity.		*Its used in many security applications, and is great for checking file integrity.

			[[File:ron_rivest.jpg\|middle]]

Kaschner at 22:36, 8 December 2010

2010-12-08T22:36:58Z

← Older revision		Revision as of 22:36, 8 December 2010
Line 48:		Line 48:
	*With MD5 it is very easy to produce collisions. (a collision is production of the same hash value from two different imputs)		*With MD5 it is very easy to produce collisions. (a collision is production of the same hash value from two different imputs)

	*With SHA-1 collisions have been found, but are extremely difficult to accomplish (theoretical, none have actually been found yet)		*With SHA-1 collisions have been found, but are extremely difficult to accomplish (theoretical, none have actually been found yet). Knowing that it would take massive amounts of time to find a collision with the full 80 steps of hashing, beginning in 2007 The Graz University of Technology created a computing platform named BOINC. Its purpose was to create a SHA-1 collision. Two years later it was abandoned due to no progress. lol :-)

	==Refrences==		==Refrences==