回复：应对 SHA-256 碰撞
原始发布页
打开来源页面查看 1 个交叉存档
SHA-256 非常强大。它不像从 MD5 到 SHA1 那种渐进式改进。除非出现某种重大的突破性攻击，否则它可以维持几十年。
如果 SHA-256 彻底被攻破，我认为我们可以就问题出现之前哪一条是诚实的区块链达成某种共识，把它锁定下来，然后使用新的哈希函数从那里继续。
如果哈希函数是逐渐被攻破的，我们可以有序地过渡到新的哈希。软件会被设定为在某个区块高度之后开始使用新的哈希。届时每个人都必须升级。软件可以保存所有旧区块的新哈希，以确保无法使用旧哈希相同的另一个区块。
英文原文
展开英文原文
SHA-256 is very strong. It's not like the incremental step from MD5 to SHA1. It can last several decades unless there's some massive breakthrough attack.
If SHA-256 became completely broken, I think we could come to some agreement about what the honest block chain was before the trouble started, lock that in and continue from there with a new hash function.
If the hash breakdown came gradually, we could transition to a new hash in an orderly way. The software would be programmed to start using a new hash after a certain block number. Everyone would have to upgrade by that time. The software could save the new hash of all the old blocks to make sure a different block with the same old hash can't be used.