Timeline for Can length extension attacks be avoided by a single bit flip?
Current License: CC BY-SA 4.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 24, 2019 at 2:35 | vote | accept | Maarten Bodewes♦ | ||
| Sep 27, 2018 at 3:00 | history | tweeted | twitter.com/StackCrypto/status/1045146171151450113 | ||
| Sep 27, 2018 at 0:08 | answer | added | Maarten Bodewes♦ | timeline score: 1 | |
| Sep 26, 2018 at 14:50 | history | undeleted | Maarten Bodewes♦ | ||
| Sep 26, 2018 at 12:04 | history | deleted | Maarten Bodewes♦ | via Vote | |
| Sep 26, 2018 at 11:16 | comment | added | yyyyyyy | Indeed, the length extension attack does not at all require that the output is the internal state, but merely that the attacker can obtain the internal state. Any easily invertible transformation to the output can easily be reversed by an attacker. | |
| Sep 26, 2018 at 11:12 | comment | added | fgrieu♦ | Could you clarify what bit(s) you would be flipping at what step in say, SHA-256 or a stated modification of that? Merely flipping (some of) the output won't prevent a slightly modified length extension attack that undoes the flip. | |
| Sep 26, 2018 at 10:36 | history | asked | Maarten Bodewes♦ | CC BY-SA 4.0 |