1

The answer is not easy, however, a good starting point is Florent Chabaud and Antoine Joux's paper on SHA-0 and SHA-1 Differential Collisions in SHA-0, Crypto 1998. Simple Introduction In, MD4, SHA-0,SHA-1, and SHA-2 there is a compression function. $$C:\{0,1\}^\ell \to :\{0,1\}^n$$ where $n$ is the output size and $\ell$ is the block lenght to process. ...


Only top voted, non community-wiki answers of a minimum length are eligible