4 ms·
well I would say that if an attacker controls what you sign, your security model is already toast, isn't it ?
by antoinealb 10y ago
well I would say that if an attacker controls what you sign, your security model is already toast, isn't it ?
- anilgulecha 10y agoNot if you sign with an ideal cryptography hash. (Rather than spend expensive compute on signing the whole message, you create a hash, and sign that.) The big news here is that SHA1 is now definitively not a cryptographically secure hash.