Length-extension attacks are still a thing (opens in new tab)

(00f.net)

2 pointscharles_irl7mo ago1 comments

1 comments

There is HMAC but also you can defend against those attacks by throwing away some of the bits. For instance do SHA-512 and keep just the first 256 bits.

j / k navigate · click thread line to collapse

1 comments

PaulHoule7mo ago

There is HMAC but also you can defend against those attacks by throwing away some of the bits. For instance do SHA-512 and keep just the first 256 bits.

j / k navigate · click thread line to collapse