The 1337 PNG Hashquine | Hackaday

A hashquine is a entertaining way to show off your crypto-tips — It’s a file that is made up of its possess hash. In some file types it is trivial, you just pick the hash to hit, and then place random knowledge in a comment or other invisible subject till you get a collision. A Python script that prints its very own hash would be uncomplicated. But not each file style is so quick. Get PNG for occasion. these data files are split into chunks of information, and each individual chunk is each CRC-32 and adler32 checksummed. Make one particular alter, and every little thing changes, in a few places at the moment. Fantastic luck obtaining that collision. So how exactly did [David Buchanan] crank out that lovely PNG, which does in truth md5sum to the price in the impression? Quite cleverly.

Luckily [David] shared some of his tricks, and they’re fairly neat. The technique he particulars is a fulfill-in-the-center hack, the place 36 pairs of MD5 collision blocks are found, with the comprehending that these 36 blocks will get extra to the file. For every block, both A or B of the pair will get plugged in at that locale, and the md5sum won’t adjust. It is a whole of 2^36 feasible mixtures of these blocks, which is much more computation than was useful for this individual hack. The alternative is to pre-compute the results of every single possible mix of the 1st 18 blocks, and retail store the outcomes in a lookup table. The second fifty percent of the collisions are operate backwards from a concentrate on CRC price, and the result checked from the lookup table. Locate a strike, and you just found a sequence of blocks that matches each your target md5sum and CRC32 effects.

Many thanks to [Julian] for the idea! And as he explained it, this hack is a person that receives extra outstanding the additional you imagine about it. Appreciate!