Git 3.0 will make SHA-256 the new default content hashing algorithm and it will be an incomprehensibly expensive and ultimately valueless and avoidable global nightmare.
I think that reasoning led to a svn repository being catastrophically corrupted by the shattered sha-1 collision.
It’s a common fallacy that deduplication doesn’t depend on the security properties of cryptographic hash functions: if the system doesn’t have any extra machinery to handle a collision then a broken hash function will cause loss of data integrity and probably availability, two of the three legs of the CIA triad.
I think that reasoning led to a svn repository being catastrophically corrupted by the shattered sha-1 collision.
It’s a common fallacy that deduplication doesn’t depend on the security properties of cryptographic hash functions: if the system doesn’t have any extra machinery to handle a collision then a broken hash function will cause loss of data integrity and probably availability, two of the three legs of the CIA triad.
score 1 · canonical
This made me double-take and I had to look it up.
“The CIA triad represents the three pillars of information security: confidentiality, integrity, and availability” (https://www.nccoe.nist.gov/publication/1800-26/VolA/index.html)
TIL.
score 1 · canonical
Heh, thanks for posting that explanation. It is definitely one of the more amusing acronym collisions :-)
score 1 · canonical