3 ms·
I don't understand the following: Why doesn't the server change the length encoded inside the hash when getting a longer string?
by jhasse 13y ago
I don't understand the following: Why doesn't the server change the length encoded inside the hash when getting a longer string?
- StavrosK 13y agoThere's no length encoded inside the hash, where did you see that? Adding the length in the total hash would probably mitigate this attack, although I'm not sure it would defeat it.