The length-extension tag has no wiki summary.
1
vote
0answers
31 views
Will length-extension work if secret is not prefixed but appended to the data? [duplicate]
Possible Duplicate:
Why is h(m||k) insecure?
Length-extension allows to append any data to the message while not knowing the secret. Any length-extension explaination one the web considers ...
10
votes
3answers
252 views
Purpose of outer key in HMAC
From what I know, the HMAC constructions has two strength:
It's resistant to length extensions
Since the key is consumed before the message, the attacker does not know the initial state, preventing ...
6
votes
1answer
543 views
In which situations is a length-extension attack a problem?
A lot of hash functions, including the SHA-2 family(but not the SHA-3 candidates and SHA256d) are vulnerable to length extension attacks. But when is this property a problem?
I guess certain naive ...
3
votes
2answers
150 views
Is a random length-extension worth the effort?
I'm conceiving an application that uses cryptographic tools and concepts for securing data. I know that's difficult and risky, therefore I prefer to ask around before implementing anything.
When ...
