0
votes
0answers
33 views

How hard is a known prefix hash preimage attack?

Suppose the attacker knows X, Z such that H(X || Y) = Z If bit-length(Y) < 60 then a brute force attack is possible. What if bit-length(Z) = 256 (such as in SHA-256) bit-length(X) = 128 ...