Skip to main content
Article
The Impact of SHA-1 File Hash Collisions On Digital Forensic Imaging: A Follow-up Experiment
Journal of Digital Forensics, Security and Law
  • Gary C Kessler, Embry Riddle Aeronautical University - Daytona Beach
Prior Publisher
The Association of Digital Forensics, Security and Law (ADFSL)
Publication Date
12-31-2016
Abstract

A previous paper described an experiment showing that Message Digest 5 (MD5) hash collisions of files have no impact on integrity verification in the forensic imaging process. This paper describes a similar experiment applied when two files have a Secure Hash Algorithm (SHA-1) collision.

References

Centrum Wiskunde & Informatica (CWI). (2017). Shattered. Retrieved from https://shattered.it/

Eastlake, D., 3rd, & Jones, P. (2001, September). US Secure Hash Algorithm 1 (SHA1). Requests for Comments (RFC) 3174. Retrieved from https://www.rfceditor. org/rfc/rfc3174.txt

Kessler, G.C. (2017). The Impact of MD5 File Hash Collisions on Digital Forensic Imaging. Journal of Digital Forensics, Security & Law, Vol. 11: No. 3, pp. 129- 140.

National Institute of Standards and Technology (NIST). (2015, August). Secure Hash Standard (SHS). Federal Information Processing Standards Publication FIPS PUB 180-4. Retrieved from http://csrc.nist.gov/publications/fips/fips1 80-4/fips-180-4.pdf

Stevens, M., Bursztein, E., Karpman, P., Albertini, A., & Markov, Y. (2017). The first collision for full SHA-1. Retrieved from https://shattered.it/static/shattered.pdf

Citation Information
Gary C Kessler. "The Impact of SHA-1 File Hash Collisions On Digital Forensic Imaging: A Follow-up Experiment" (2016)
Available at: http://works.bepress.com/gary_kessler/91/