jeblad added a comment.
In my opinion, this signing of a hash of an extract of an already uploaded statement seems extremely hackish. I still believe this should be reconsidered. Anyhow, SHA-1 is completly broken. Schneier reported it was theoretically broken in 2005 SHA-1 Broken <https://www.schneier.com/blog/archives/2005/02/sha1_broken.html>, then in 2015 full attack on SHA-1 was demonstrated //the SHAppening//, and then in 2017 the first collision //the SHAttered//. Since then the complexity for a Chosen-prefix collision (CP- collision) is down to 2⁶¹ – 2⁶³. SHA-1 is a Shambles - First Chosen-Prefix Collision on SHA-1 and Application to the PGP Web of Trust <https://eprint.iacr.org/2020/014.pdf> There are other problems too, and I wonder if this will create a false sense of quality. TASK DETAIL https://phabricator.wikimedia.org/T138708 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: jeblad Cc: ElanHR, Addshore, Lokal_Profil, Ayack, jeblad, CalebMoses, Fliptrail, Cirdan, Salgo60, AndrewSu, Mineo, Hjfocs, Scott_WorldUnivAndSch, Jan_Dittrich, RazShuty, Joshi-Jay-31, srishakatux, Jonas, rosalieper, EddyAfful, BamLifa, MichaelSchoenitzer, psinghal20, Nikhil-nk, Liuxinyu970226, BVershbow_WMF, PDrouin-WMF, Astinson, Ramsey-WMF, Quoth, Daniel_Mietchen, Tpt, Glorian_Yapinus, iecetcwcpggwqpgciazwvzpfjpwomjxn, Jane023, DarTar, Abbe98, I9606, YULdigitalpreservation, Tallerone, abian, Scott_WUaS, johl, jayvdb, tfmorris, Spinster, TomT0m, Denny, Eloquence, JanZerebecki, T.seppelt, Aklapper, daniel, Zppix, Lydia_Pintscher, darthmon_wmde, Dinadineke, DannyS712, Nandana, tabish.shaikh91, Lahi, Gq86, GoranSMilovanovic, Soteriaspace, Jayprakash12345, JakeTheDeveloper, QZanden, merbst, LawExplorer, _jensen, Wikidata-bugs, aude, Dinoguy1000, TheDJ, Mbch331
_______________________________________________ Wikidata-bugs mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
