Hash collision
A hash collision occurs when two distinct inputs produce the same digest under the same hash function and parameters.
Hashing identical bytes twice is not a collision. Finding any colliding pair differs from finding a replacement for an already specified original, which is a second-preimage problem. [1] [2] A stale or misplaced record with its own valid digest can pass a check without any collision. [5]
Relations
- related
- checksum, cryptographic-hash, merkle-tree, deduplication
Limitations
- Collision resistance concerns the difficulty of finding colliding inputs, not an assertion that every input has a unique digest. [3]
- CRC undetected-error probabilities require a stated error model and cannot be treated as universal device failure rates. [4]
Citations
- NIST CSRC glossary: collision
- NIST CSRC glossary: second preimage resistance
- NIST CSRC glossary: cryptographic hash function and security properties
- RFC 3385: iSCSI CRC/Checksum Considerations, sections 1-2 and 10 (historical error-model analysis)
- Hesela: Why a valid checksum can still return the wrong data