VI · Cryptographic foundations

Birthday attack

What it is

Finding any collision in an n-bit hash takes ~2^(n/2) operations, not 2^n.

Where it lives

Hash function security, why 128-bit MAC tags are the modern minimum.

The key insight

SHA-1 is 160 bits → 80 bits of resistance → broken in 2017. SHA-256 → 128 bits → safe past 2050.