diff --git a/NewCaps/Rainhill.md b/NewCaps/Rainhill.md index 32726d6..7d9ef38 100644 --- a/NewCaps/Rainhill.md +++ b/NewCaps/Rainhill.md @@ -25,7 +25,7 @@ where *k* = bitlength(*K_**), *r* = bitlength(*R*), *s* = bitlength(*S*) = bitle 1. *shape-shifter immutable file*: creator creates more than one file matching the immutable file readcap -2. See the probability table at . The effective hash length is approximately *r*+*t* bits. +2. See the probability table at . The effective hash length is approximately *r*+*t* bits. 3. On Merkle-Damgård hashes with an internal state that is the same size as the hash output (like SHA-256), there are better second-preimage attacks than brute force. See . The doubled "SHA-256d" construction used by Tahoe does not help here. This is not significant for roadblock/speedbump attacks because the internal state will be much larger than *t* bits, but it is significant for the other second-preimage attacks.