Re: [saag] Revision of "Attacks on Cryptographic Hashes in Internet Protocols"

Mouse <mouse@Rodents-Montreal.ORG> Thu, 29 November 2012 06:20 UTC

Return-Path: <mouse@Sparkle.Rodents-Montreal.ORG>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 783CF21F8A30 for <>; Wed, 28 Nov 2012 22:20:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -9.988
X-Spam-Status: No, score=-9.988 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_MISMATCH_ORG=0.611, RCVD_IN_DNSWL_HI=-8]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id QXtY8qxnc4mV for <>; Wed, 28 Nov 2012 22:20:16 -0800 (PST)
Received: from Sparkle.Rodents-Montreal.ORG (Sparkle.Rodents-Montreal.ORG []) by (Postfix) with ESMTP id 7573921F8A29 for <>; Wed, 28 Nov 2012 22:20:14 -0800 (PST)
Received: (from mouse@localhost) by Sparkle.Rodents-Montreal.ORG (8.8.8/8.8.8) id BAA16690; Thu, 29 Nov 2012 01:20:12 -0500 (EST)
Date: Thu, 29 Nov 2012 01:20:12 -0500 (EST)
From: Mouse <mouse@Rodents-Montreal.ORG>
Message-Id: <201211290620.BAA16690@Sparkle.Rodents-Montreal.ORG>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Erik-Conspiracy: There is no Conspiracy - and if there were I wouldn't be part of it anyway.
X-Message-Flag: Microsoft: the company who gave us the botnet zombies.
X-Composition-Start-Date: Thu, 29 Nov 2012 01:17:18 -0500 (EST)
In-Reply-To: <>
References: <>
Subject: Re: [saag] Revision of "Attacks on Cryptographic Hashes in Internet Protocols"
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Advisory Group <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 29 Nov 2012 06:20:16 -0000

> The point that I wanted to make is: if the actual ISO image creator
> is untrustworthy and the hash function is not collision resistant,
> then it is possible for that person to make two images, one good and
> one bad.   This enables attacks on the system that are not otherwise
> possible, [...]

Ah!  I misunderstood.

Yes.  (I could quibble about how the colliding data blobs have to be
valid ISO images, but I suspect that part would border on trivial in
any realistic collision-resistance break, just as the MD5 collision
example I have managed to make both blobs valid PostScript programs.)

/~\ The ASCII				  Mouse
\ / Ribbon Campaign
 X  Against HTML
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B