The point of this post is to demonstrate how easy it is to generate collisions for HashDoS attacks. Cryptographic hash functions are usually designed to be fas

The point of this post is to demonstrate how easy it is to generate collisions for HashDoS attacks. Cryptographic hash functions are usually designed to be fast since they are on the hot path for cryptographic signatures and for hash-based message authentication codes. Password hashes are designed to be slow, but they are an entirely different beast. The point about https in the conclusion is that the author’s PolyMur hash uses a polynomial construction related to GCM and poly1305, which makes it much harder to invert.