Length-extension attacks are still a thing

Length-extension attacks are still a thing(00f.net)

2 points by charles_irl 208 days ago | 1 comment

PaulHoule 208 days ago |

There is HMAC but also you can defend against those attacks by throwing away some of the bits. For instance do SHA-512 and keep just the first 256 bits.

PaulHoule 208 days ago |

There is HMAC but also you can defend against those attacks by throwing away some of the bits. For instance do SHA-512 and keep just the first 256 bits.