That's only true for the much easier injection case where you generate
_both_ files together.
From an external git hash-attack standpoint, that's not a very useful
case. It's much more useful if you can make a new file that has a hash
that matches a given old file, and in that case, the filelengths are
likely not the same.
Linus
-
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html