3 ms·
Something about multihash makes me worry it's a security risk. Like I worry that it encourages this mistake: 1. Define a new protocol with multihash somewhere
by oconnor663 9y ago
Something about multihash makes me worry it's a security risk. Like I worry that it encourages this mistake:
1. Define a new protocol with multihash somewhere in it.
2. Import a super convenient multihash library.
3. Verify all hashes with a simple library function.
That sounds super natural and convenient to me, but if it means that you support MD4 by default, then you've introduced a downgrade attack into your protocol.
- lgierth 9y agoYou can lock it down to specific hash functions no problem.
- stouset 9y agoIf I’ve learned anything from being in this field it’s that: 1) many if not most implementations will support lots of algorithms by default, and 2) as a result, approximately zero users will lock it down
- oconnor663 9y agoYeah that's exactly what I'm worried about. The nature of the beast makes it tricky to define a safe default.
- acdha 9y ago3) the users who do lock it down will be harangued about not being compatible with less secure versions barring a major incident