Skip to content
IOTA's hash function curl is broken
Python Go
Branch: master
Clone or download
Latest commit ad1b083 Aug 18, 2018
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
collide
examples
iotutil
template
valueattack
.gitignore
README.md
vuln-iota.md

README.md

Vulnerability report on IOTA and code to create collisions

Read our full paper Cryptanalysis of Curl-P and Other Attacks on the IOTA Cryptocurrency.

Read the original report here.

See examples for the original colliding bundles we released in 2017.

See valueattack, collide, and template for the code to create colliding bundles.

Make sure to set your GOPATH and check out this repo to $GOPATH/src/github.com/mit-dci/tangled-curl

cd $GOPATH/src/github.com/mit-dci/tangled-curl/valueattack
go get -u github.com/getlantern/deepcopy
go get -u github.com/iotaledger/giota

Make sure iotaledger is at the right commit:

pushd $GOPATH/src/github.com/iotaledger/giota/
git checkout 7e48a1c9b9e904f07e1fc82815e5b302873a6dec
popd
go build
You can’t perform that action at this time.