Skip to main content

Tuleap Community Edition development and releases are no longer public. You have until September 30th to download packages and sources in Tuleap project. You can contact the team if you need further assistance.

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #8103 A broken hash function is used to check the integrity of a file
    Infos
    #8103
    Thomas Gerbet (tgerbet)
    2015-05-27 16:53
    2015-05-27 16:53
    8130
    Details
    A broken hash function is used to check the integrity of a file
    Properties of collision and preimage resistance are broken with MD5. It is quite easy to generate two files with the same MD5 hash.
    A cryptographic hash function must be used instead. A hash function from the SHA-2 family or SHA-3 are good candidates.

    References:
    http://merlot.usc.edu/csac-f06/papers/Wang05a.pdf
    http://www.mathstat.dal.ca/~selinger/md5collision/
    http://natmchugh.blogspot.fr/2014/10/how-i-created-two-images-with-same-md5.html
    Delivery/File release system
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Verified
    Empty
    Attachments
    Empty
    References
    References list is empty