4 ms·
SHA1 is vulnerable because the entire internal state of the hash function is used as the output. This allows you to 'keep going' and extend what was hashed. SH
by Strilanc 13y ago
SHA1 is vulnerable because the entire internal state of the hash function is used as the output. This allows you to 'keep going' and extend what was hashed.
SHA-3 is not vulnerable because it only uses a subset of the internal state as the output (256 output vs 1600 internal). You can't keep going because you're missing the necessary state.