18 ms·
It is not simply wrong. The usual Merkle-Damgard padding only means that you get something like SHA1(foo || garbage || bar) instead, garbage being smaller than
by pbsd 13y ago
It is not simply wrong. The usual Merkle-Damgard padding only means that you get something like SHA1(foo || garbage || bar) instead, garbage being smaller than the hash's block size.
- maaku 13y agoMaybe disingenuous was a better word. The "garbage" in the middle still protects against most (though not all) attacks.