3 ms·
Could you clarify please: is SHA-3 known to not be vulnerable to this attack, or merely not known to be vulnerable to this attack?
by mooism2 13y ago
Could you clarify please: is SHA-3 known to not be vulnerable to this attack, or merely not known to be vulnerable to this attack?
- ghshephard 13y agoCourtesy of tptacek, https://news.ycombinator.com/item?id=5776044 https://news.ycombinator.com/item?id=5776044 "Most are vulnerable to length extension attacks. SHA3 (Ketchup) is not vulnerable to length extension attacks, because resistance to length extension was a design criteria for the SHA3 contest."
- Strilanc 13y agoSHA1 is vulnerable because the entire internal state of the hash function is used as the output. This allows you to 'keep going' and extend what was hashed. SHA-3 is not vulnerable because it only uses a subset of the internal state as the output (256 output vs 1600 internal). You can't keep going because you're missing the necessary state.