There is infinite number of publicly-known #sha1 collisions, not just one. When you reuse fitst 320 bytes of the #shattered files and append an arbitrary suffix (the same for both of them), you get another collision.

The remaining question is if we can get an useful collision this way.

Example of another collision (320 bytes):

https://public.v6ak.com/shattered-trimmed/shattered-1.pdf
https://public.v6ak.com/shattered-trimmed/shattered-2.pdf
Vít Šesták před 4 týdny