4 ms·Length-extension attacks are still a thing2 points by charles_irl 11mo agoPaulHoule 11mo agoThere is HMAC but also you can defend against those attacks by throwing away some of the bits. For instance do SHA-512 and keep just the first 256 bits.