Re: more git updates..

["Theodore Ts'o" <tytso@mit.edu>]

On Sun, Apr 24, 2005 at 06:38:13AM +0200, Bernd Eckenfels wrote:
> On Sat, Apr 23, 2005 at 09:13:26PM -0700, Paul Jackson wrote:
> > I don't believe you.  Reference?
> 
> I had MD5 in mind, sorry. I havent seen the SHA-1 colision samples, yet.
> However it is likely to be available soon. (a simple pair with two files
> will be enugh to cause "theoretical" problems. However I think it would be
> possible to detect collisions on add and append sequence numbers... ugly.

The MD5 collision smaples are for two 16 byte inputs which when run
through the MD5 algorithm, result in the same 128-bit hash.  The SHA-1
collision samples are for two 20 byte inputs which when run through
the SHA algorithm create the same 160-bit hash.  In neither case will
the inputs be valid git objects, nor anything approaching ASCII text,
let alone valid C files.  

So what theoretical problems will be caused by this?  Sure, an
attacker can check a garbage file containing (apparently) random bytes
into git, and then produce another garbage file containing some
completely other (apparently) random bytes which will collide with the
first garbage file.  

You want to explain how this is going to cause problems in the git
systems?  And even if you can describe any problems, you want to
explain why any such theoretical problems couldn't be trivially
detected and fixed?

						- Ted