[Webkit-unassigned] [Bug 168774] Add a test verifying cache deduplication is not sensitive to SHA1 collision attack

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Feb 24 12:49:31 PST 2017


https://bugs.webkit.org/show_bug.cgi?id=168774

Konstantin Tokarev <annulen at yandex.ru> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |annulen at yandex.ru
             Status|RESOLVED                    |UNCONFIRMED
         Resolution|WONTFIX                     |---

--- Comment #36 from Konstantin Tokarev <annulen at yandex.ru> ---
>So maybe an idea is to instead of committing this pdf files with the sha1 collision as files, to embed them on the html of the test with base64?

AFAIU point of test was to have 2 different cached resources with equal SHA1. Embedding into HTML will break collision.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170224/f9e2b04e/attachment.html>


More information about the webkit-unassigned mailing list