---
title: "Practical Collision Attack Against Long Key IDs in PGP"
url: https://daily.dev/posts/practical-collision-attack-against-long-key-ids-in-pgp-5z2lny5m6
source_url: https://soatok.blog/2026/01/07/practical-collision-attack-against-long-key-ids-in-pgp/
type: article
source: "Dhole Moments"
published: 2026-01-07T19:12:40.241Z
updated: 2026-01-07T19:13:16.708Z
tags: ["security", "cryptography"]
reading_time: 3
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Practical Collision Attack Against Long Key IDs in PGP

**[Dhole Moments](https://daily.dev/sources/soatok)** · 3 min read · 0 upvotes · 0 comments

## Summary

A practical demonstration of a collision attack against PGP's 64-bit Long Key IDs, achieved in 3 days on a laptop using birthday attack principles. Two different PGP keypairs were generated that share the same Long Key ID (948F9326DD647C78), exploiting the mathematical reality that 64-bit outputs require only ~2^32 attempts for 50% collision probability. The attack methodology involved generating keypairs, iterating timestamps, computing Key IDs, sorting results, and identifying collisions. Complete proof-of-concept code and both public and private keys are provided, demonstrating that empirical security claims about 64-bit identifiers are fundamentally flawed.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://soatok.blog/2026/01/07/practical-collision-attack-against-long-key-ids-in-pgp/>

---

Tags: [#security](https://daily.dev/tags/security), [#cryptography](https://daily.dev/tags/cryptography)

[View this post on daily.dev](https://daily.dev/posts/practical-collision-attack-against-long-key-ids-in-pgp-5z2lny5m6)
