Using second keyring may be misleading?

Georgi Guninski guninski at guninski.com
Wed Jul 25 15:33:41 CEST 2012


On Sun, Jun 24, 2012 at 08:42:07AM +0100, Nicholas Cole wrote:
> 3. I know this is a particular problem with version 3 key ids. How
> much stronger are version 4?
>


For a v.4 64 bit keyid collision the most naiive attack will need
about 2^64 calls to SHA1.

Currently a GPU costing about $500 will break it in about 220 years.
So 220 GPUs will break it in a about year.

Total budget (electricity, etc) might be in the range of $200K - $300K -
someone familiar with hash cracking told me so.

Might be wrong though.




More information about the Gnupg-devel mailing list