[DHA]: A new hashing algorithm

[payload]

Hello there fellows,
a few weeks ago I came up with my own hashing algorithm and I could use some feedback. It was made in 2 hours in Python.
It is available on GitHub.

There is a good explanation of how it works. If anyone can look at it and analyze it, it would be good.
Report all collisions and suggest corrections. Thanks.

[fashizzlepop]

I'd suggest making this importable.

[WallShadow]

Hello there fellows,
a few weeks ago I came up with my own hashing algorithm and I could use some feedback. It was made in 2 hours in Python.
It is available on GitHub.

There is a good explanation of how it works. If anyone can look at it and analyze it, it would be good.
Report all collisions and suggest corrections. Thanks.

Do you have psuedocode of it or just written in a different language? Python is one of the few that I can't utilize, sorry.

[fashizzlepop]

I ran a quick test on it by testing combinations of 3 characters ascii 32 to 126.

Code: Select all

import itertools

** DHA function here **

def main():
  print "[+] Running collision tester"
  print "[+] Testing strings of length 1-3"

  chars = ""

  for i in range(32,126):
    chars += chr(i)

  print "[+] Testing strings with the following characters:\n" + chars

  onechar = list(itertools.product(chars, repeat=1))
  print "\n[+] Number of strings to test of length:\n\t1 char: " + str(len(onechar))
  twochar = list(itertools.product(chars, repeat=2))
  print "\t2 chars: " + str(len(twochar))
  thrchar = list(itertools.product(chars, repeat=3))
  print "\t3 chars: " + str(len(thrchar))

  hashes = {}

  total = onechar
  total += twochar
  total += thrchar

  collisions = 0

  for s in total:
    #print "[+] testing '" + ''.join(s) + "'"
    h = dha(''.join(s))
    if not h in hashes:
      hashes[h] = ''.join(s)
    else:
      collisions += 1
      print "[-] " + ''.join(s) + ":" + h + " matches " + hashes[h] + ":" + h

  print "[-] Total collisions found: " + str(collisions)


It found 283915 collisions in combinations of just 3 characters...

It appears that # and / and , within strings caused many collisions. With just 2 char strings there are still plenty of collisions and it won't take as long to run as it does with 3 if you want to see the collisions for yourself. Just wrap your script up in a function call dha()

[payload]

Thanks. Looks like it is not secure at all. I better come up with DHA2.