VI · Cryptographic foundations
Birthday attack
What it is
Finding any collision in an n-bit hash takes ~2^(n/2) operations, not 2^n.
Where it lives
Hash function security, why 128-bit MAC tags are the modern minimum.
The key insight
SHA-1 is 160 bits → 80 bits of resistance → broken in 2017. SHA-256 → 128 bits → safe past 2050.