Start a Conversation

Unsolved

This post is more than 5 years old

1096

February 24th, 2017 02:00

SHA-1 Collision and XtremIO ProofOfConcept

Shattered SHA-1 collision PoC (https://shattered.io/)!

Not always, but in some cases (still under precision and investigation), the second .PDF (the red one) is ignored and substituted (inline deduplication) by first (the blue one) when it is written to a XtremIO volume

727 Posts

February 24th, 2017 09:00

Not sure what you are pointing to...can you share more details of what test you did and the results?

February 27th, 2017 05:00

According to https://shattered.io/ there is first SHA-1 collision ever.

So we have two different files (two .PDFs respectively, the blue one and the red one) with identical SHA-1 hash. Also first 4k blocks of files also are different but with the same SHA-1 hash and first 8k blocks of files also are different but with the same SHA-1 hash (it can be checked even via CRC32 of theses)

In theory, as XtremIO use SHA-1 inline deduplication, all of both - files, first 4k and first 8k blocks must be deduplicated.

In real world example it happens not always, but in some cases (still under precision and investigation):

* the second .PDF (the red one) is ignored and substituted (inline deduplication) by first (the blue one) when it is written to a XtremIO volume

* for 4k blocks substitution not watched yet...

* for 8k blocks substitution not watched yet...

No Events found!

Top