For a shorter executive summary, what does "broke" mean here? Can you reliably produce collisions now for 92% of SHA-256 digests?
We broke 92% of SHA-256 – you should start to migrate from it
11–20 of 86 posts
Re: We broke 92% of SHA-256 – you should start to migrate from it
#12I'm skeptical.
Re: We broke 92% of SHA-256 – you should start to migrate from it
#13The "Intermediate Report" [1] lists the authors as "Robert V. and Claude (Anthropic)". Is there any reason to believe this is not AI hallucinations?
[1] https://stateofutopia.com/papers/2/intermediate-report.pdf
Re: We broke 92% of SHA-256 – you should start to migrate from it
#14Seems more like a case study in AI psychosis
Re: We broke 92% of SHA-256 – you should start to migrate from it
#15The neat thing about bitcoin is that the incentive to break it is so high that it would almost certainly be the first place you would learn that SHA2 had been broken. Not on a website like this. I can verify its integrity by opening robinhood on my phone.
Re: We broke 92% of SHA-256 – you should start to migrate from it
#16Is this real? The website does not look credible.
[deleted]
Re: We broke 92% of SHA-256 – you should start to migrate from it
#17We publish this work as responsible disclosure. While a full SHA-256 collision (sr = 64) has not yet been achieved, the tools and techniques presented here represent significant methodological advances that bring it closer. Organizations relying on SHA-256 for collision resistance should begin evaluating migration paths to SHA-3 or other post-quantum hash functions. The cryptographic community should treat the collision resistance of SHA-256 as having a finite and shrinking safety margin.
Re: We broke 92% of SHA-256 – you should start to migrate from it
#18> Secure hash functions are used to make a short version of a large file. Ideally, it has several properties including making it infeasible to find two files with the same cryptographic hash. We've just gotten 92% of the way there. This has security ramifications in that other researchers are expected to be able to complete the work through similar methods as explored in the paper. We weren't sure if this was a remar…
Is a partial collision an indicator that it could be broken? The "we broke it" seems an exageration, but maybe that's a failure of my understanding.
Re: We broke 92% of SHA-256 – you should start to migrate from it
#19> it is possible that we'll find relations that carry across the entire double-SHA-256 pipeline
Bitcoin mining is a partial second preimage of 0x00 though, not a collision, that statement just seems to be so outside the realm of what they’re claiming to have done. Even MD5, the most widely known to be broken hash, would be secure when used in the same way bitcoin uses SHA256 (other than being too short now, bitcoin miners have done 80 bits of work at this point many times over).
Re: We broke 92% of SHA-256 – you should start to migrate from it
#20Seems more like a case study in AI psychosis
Indeed, the text feels very LLM-written.