[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: checking system integrity

On 11 Feb 2001, Brian May wrote:

> Also, I have heard there are algorithms that allow you to create a file
> with the same md5sum, but different length[1].

I have seen this as well, there was a good example of forging PGP 2
fingerprints using this technique.
> Hence, it is not good enough just testing the md5sum, you need to
> check the file size too.

Or include the size in the hash data..


Reply to: