Relatio experiment shows hash matching does not guarantee content authenticity
An experiment with the Relatio Workbench software demonstrates that a matching cryptographic hash proves consistency, not authenticity. Changing a six-byte text file from 'before' to 'after!' caused import rejection because the hash no longer matched. Updating the recorded SHA-256 digest to correspond with the new content allowed the import to pass. This shows that if someone can edit both the content and its associated digest, they can create a self-consistent case. The software correctly verifies that supplied data matches its supplied hash, but cannot independently verify the origin of either.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)
Log in to join the discussion and vote.
Log in