3 ms·
No. Signatures provide the same amount of integrity protection. In fact, all practical asymmetric signature schemes sign a hash. If an attacker can control what
by jnwatson 10y ago
No. Signatures provide the same amount of integrity protection. In fact, all practical asymmetric signature schemes sign a hash. If an attacker can control what somebody signs, he can switch out signed documents using this vulnerability.
- antoinealb 10y agowell I would say that if an attacker controls what you sign, your security model is already toast, isn't it ?
- anilgulecha 10y agoNot if you sign with an ideal cryptography hash. (Rather than spend expensive compute on signing the whole message, you create a hash, and sign that.) The big news here is that SHA1 is now definitively not a cryptographically secure hash.