5 ms·
I don't imagine many developers see hash(secret||data) as a replacement from HMAC. I made that mistake once, but I had not yet heard of HMAC at the time.
by finnw 13y ago
I don't imagine many developers see hash(secret||data) as a replacement from HMAC. I made that mistake once, but I had not yet heard of HMAC at the time.
- pointernil 13y agoYup, that's exactly the point! Quite some developers are re-inventing this kind of things without knowing how their solutions are lacking. It's tempting and fun and in the end in case of crypto insecure.