Gaming SHA-1 - How Did Google do it?

[gudenau]

I'm interested in causing a SHA-1 collision, I know Google did it with a PDF a while ago.

Anyone have any details on how this was actually done?

 

[The Real Jdbye]

I'm interested in causing a SHA-1 collision, I know Google did it with a PDF a while ago.

Anyone have any details on how this was actually done?

I don't know, but keep in mind Google has access to a crazy amount of computing power. It might be impossible for us at home to accomplish the same thing.

 

[DeadlyFoez]

Yes, insane amounts of computing power. Too unreasonable to attempt to do at home.

 

[migles]

https://www.theregister.co.uk/2017/02/23/google_first_sha1_collision

 

[The Real Jdbye]

https://www.theregister.co.uk/2017/02/23/google_first_sha1_collision

Well, there you have it. Guess @gudenau will have to wait for quantum computers to become mainstream

 

[smf]

There is enough information to reproduce it https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
https://shattered.io/

It can be detected and there are some major caveats, so you can't just feed in a file and say you want it to have a specific SHA-1.

 

[gudenau]

Interesting, looks like this would be easy enough to setup at least.

Just need to get like 10,000 to run a tool on there computers.

 

[SirNapkin1334]

I'm interested in causing a SHA-1 collision, I know Google did it with a PDF a while ago.

Anyone have any details on how this was actually done?

probably just a lot of rng and a lot of processing power