Reputation
Top tag
Next privilege 250 Rep.
View close votes
Badges
12
Newest
 Caucus
Impact
~8k people reached

  • 0 posts edited
  • 0 helpful flags
  • 14 votes cast
Jul
8
reviewed Approve Using C_Sign to create a PKCS7 signature
Jun
30
accepted Why is HMAC-SHA1 still considered secure?
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@StephenTouset - yeah I got that. However, is there any usage of SHA-1 from which you should run away rather than move away or walk away.
Jun
25
accepted Dan Boneh's Cryptography lecture - problem with 802.11b
Jun
25
comment Dan Boneh's Cryptography lecture - problem with 802.11b
Note that the problem with WEP was that they reused the input (i.e. the seed) to the PRG, it was not because the output cycled around! - yes I did understand that. However, I didn't know that PRGs didn't cycle. Thank you
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@RickyDemer - Thank you
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@RickyDemer - So is there any application of SHA1 where it is not secure?
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@CodesInChaos - you say that HMAC-SHA1 is a problem only if the key is known. But if the key is known, that will be a problem for any HMAC-hash operation, right?
Jun
25
comment Why is HMAC-SHA1 still considered secure?
If the key is known to the attacker, then even SHA2 will be a problem, right?
Jun
25
asked Dan Boneh's Cryptography lecture - problem with 802.11b
Jun
25
comment Why is HMAC-SHA1 still considered secure?
So when should SHA1 not be used? i.e. discovery of the issue in SHA1 precludes it from use where?
Jun
25
comment Why is HMAC-SHA1 still considered secure?
So when should SHA1 not be used? i.e. discovery of the issue in SHA1 precludes it from use where?
Jun
25
revised Why is HMAC-SHA1 still considered secure?
added 19 characters in body
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@fgrieu - I think I made a mistake in terminology - when I wrote signing, I should have actually written generating a message authentication digest to protect integrity. In case of collisions, you can change the message and preserve the same MAC, so it is a problem, right?
Jun
25
revised Why is HMAC-SHA1 still considered secure?
edited title
Jun
25
asked Why is HMAC-SHA1 still considered secure?
Jun
23
awarded  Caucus
Jan
29
awarded  Popular Question
Jan
17
answered RSA signing security
Jan
15
comment Is RSA with SHA1 broken?
I am facing the same issue faced here with SHA2 - forums.embarcadero.com/thread.jspa?threadID=96592