Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

SHA-1 gives 160-bit secure hash. Let\'s assume that a successful brute force att

ID: 3891812 • Letter: S

Question

SHA-1 gives 160-bit secure hash. Let's assume that a successful brute force attack is possible by trying 2^(160/3) combinations. If we do a double hash (as is done in Encase tool for forensics), the input is the secure hash of the message and the output is also another secure hash. Comparing this with SHA-2 using 256 bits, we can say ? This mUltiple choice.

(A) SHA-256 is stronger because it requires 2^(256/3) brute force combinations, while SHA-1 still needs 2^(160/3) combinations.

(B) double SHA-1 is stronger because it requires twice the 2^(160/3) combinations.

(C) double SHA-1 is stronger because it requires about 2^(160/3) X 2^(160/3) maximum combinations becaue for each broken first stage, there are 2^(160/3) brute force attempts may be needed.

(D) they are roughly equal and there was no need for the 256 version.

(A) SHA-256 is stronger because it requires 2^(256/3) brute force combinations, while SHA-1 still needs 2^(160/3) combinations.

(B) double SHA-1 is stronger because it requires twice the 2^(160/3) combinations.

(C) double SHA-1 is stronger because it requires about 2^(160/3) X 2^(160/3) maximum combinations becaue for each broken first stage, there are 2^(160/3) brute force attempts may be needed.

(D) they are roughly equal and there was no need for the 256 version.

Explanation / Answer

Answer is C, as double SHA will require about 2^(160/3) X 2^(160/3). for each statage we need to check the 2^(160/3) combinations means it will take lot of time