5 ms·
> BLAKE2 was a SHA-3 finalist, and thus by definition isn't vulnerable to length extension either. BLAKE2 wasn't, but BLAKE was. Aside: Most people should con
by CiPHPerCoder 9y ago
> BLAKE2 was a SHA-3 finalist, and thus by definition isn't vulnerable to length extension either.
BLAKE2 wasn't, but BLAKE was.
Aside: Most people should continue to use HMAC-SHA256 instead of worrying about LEAs and justifying a switch to non-HMAC H(secret || message) constructions.