New answers tagged backdoors
I'm not very familiar with hash functions, but consider the following toy example: take any hash function $H$, and define a new function $H'$ which on input $x$ discards the last bit and applies $H$ to the result. $H'$ is not collision resistant because flipping the last bit of any input does not change the hash. Yet this may not be immediately obvious, and ...
Top 50 recent answers are included