Questions tagged [sha-1]
SHA-1 is a hash function that is two generations old, no longer considered secure for all uses and should only be used for backward compatibility.
15
questions with no upvoted or accepted answers
3
votes
0
answers
111
views
Are there "light" versions of cryptographic hash functions?
After tinkering with cryptographic hash functions, I started wondering if they do have counterpart functions that would imitate their cryptographic properties but with a lower level of strength in ...
2
votes
0
answers
87
views
What technical flaw in the Secure Hash Standard was the NIST referring to?
On July 11, 1994, the NIST proposed an interesting revision to FIPS 180, about the Secure Hash Standard:
A revision of Federal Information Processing Standard (FIPS) 180,
Secure Hash Standard (SHS), ...
2
votes
0
answers
745
views
Is it possible to prevent length extension attacks
Is it possible to prevent length extension attacks without using any other hash algorithm than SHA-1?
2
votes
0
answers
210
views
*feasible* pre-image attacks against reduced SHA-1
(tldr: see last paragraph)
Although SHA-1 is vulnerable to collision attacks, it is still resistant to pre-image attacks. SHA-1 was designed to be resistant until a brute-force attack of $2^{160}$ is ...
1
vote
0
answers
362
views
What is more secure, HMAC with SHA-1, or with SHA-256 and take a substring?
I'm going to guess the latter, but just wanted to ask here.
I want to have a relatively short signature, and my goal is to take a substring of the resulting hash.
1
vote
0
answers
92
views
Coursera Course or book(s) That covers the following subjects: OPENSSL, SSH, PKI, MD5, RSA, Certificates, keys, signatures
I started working as a developper in a cryptography company 3 months ago where the applications are for mostly windows applications. I found that I don't have enough knowledge concerning the topics ...
1
vote
0
answers
60
views
vec_sel in SHA-1
I can't find what is vec_sel() in this optimization from Wikipedia:
Instead of the formulation from the original FIPS PUB 180-1 shown, the following equivalent ...
1
vote
0
answers
373
views
Kerberos Use of SHA-1
A lot of good information on Kerbero's encryption methods discussed here, but I there is a second question that arises. Does use of SHA-1 in the overall algorithm weaken Kerberos? If so, will ...
1
vote
0
answers
23
views
GlobalSign cert in Trusted root for Google Services shows Sha1. Security postures
"GlobalSign" certificate in Trusted Root Certification Authorities for Google Services shows Sha1. Security postures are different than just 2-3 yr ago. At my home, router bought 2016, networked; ...
1
vote
0
answers
88
views
Nature of risk(s) from KeeChallenge XML file stored in cloud at Onedrive
As a noob user of KeePass2 on Windows desktop and Keypass2Android on my phone, supplemented by YubiKey Neo configured for hmac-sha1 challenge response, I noticed that Keepass2Android appears to store ...
0
votes
0
answers
68
views
Is a reduced character space pre-image attack possible for SHA-1?
Given a hash cipher f(sha1($pepper . $plaintext)) where
f is some transformation to an 11-byte string
pepper is 24 bytes long with a character space of 62 (and is ...
0
votes
0
answers
43
views
On the exposition of SHA-1 attack (known_prefix + user_input + backend_secret)
In this question on sha1(known_prefix + user_input + backend_secret), an answer states that is realistically possible to find the first few bytes of ...
0
votes
0
answers
55
views
Time by "crypto_shash_digest"
I am trying to calculate the time consumed to run SHA1 in the kernel level.
I had run the upper codes (inside a for loop) and the following was my result. It first showed about 30micro seconds and ...
0
votes
0
answers
149
views
Security implication of concatenating two hashes using different algorithms
Background
Hashing files is an expensive thing for CPU. I am tasked to write a secure digital signature scheme. For that, I decided to check the integrity of files using Hash/Digest.
To be more secure,...
0
votes
0
answers
67
views
Should I update my fedora encrypted system?
I have installed my Fedora Workstation version 23 using native disk encryption. Since it, I am upgrading it using dnf system-upgrade plugin. Today, I have fedora 32. Some time ago, I’ve discovered ...