Questions tagged [sha-1]
SHA-1 is a hash function that is two generations old, no longer considered secure for all uses and should only be used for backward compatibility.
11
questions with no upvoted or accepted answers
2
votes
0answers
542 views
Is it possible to prevent length extension attacks
Is it possible to prevent length extension attacks without using any other hash algorithm than SHA-1?
2
votes
0answers
99 views
*feasible* pre-image attacks against reduced SHA-1
(tldr: see last paragraph)
Although SHA-1 is vulnerable to collision attacks, it is still resistant to pre-image attacks. SHA-1 was designed to be resistant until a brute-force attack of $2^{160}$ is ...
1
vote
0answers
33 views
What technical flaw in the Secure Hash Standard was the NIST referring to?
On July 11, 1994, the NIST proposed an interesting revision to FIPS 180, about the Secure Hash Standard:
A revision of Federal Information Processing Standard (FIPS) 180,
Secure Hash Standard (SHS), ...
1
vote
0answers
26 views
vec_sel in SHA-1
I can't find what is vec_sel() in this optimization from Wikipedia:
Instead of the formulation from the original FIPS PUB 180-1 shown, the following equivalent ...
1
vote
0answers
101 views
Kerberos Use of SHA-1
A lot of good information on Kerbero's encryption methods discussed here, but I there is a second question that arises. Does use of SHA-1 in the overall algorithm weaken Kerberos? If so, will ...
1
vote
0answers
21 views
GlobalSign cert in Trusted root for Google Services shows Sha1. Security postures
"GlobalSign" certificate in Trusted Root Certification Authorities for Google Services shows Sha1. Security postures are different than just 2-3 yr ago. At my home, router bought 2016, networked; ...
1
vote
0answers
60 views
Nature of risk(s) from KeeChallenge XML file stored in cloud at Onedrive
As a noob user of KeePass2 on Windows desktop and Keypass2Android on my phone, supplemented by YubiKey Neo configured for hmac-sha1 challenge response, I noticed that Keepass2Android appears to store ...
0
votes
2answers
60 views
Question about SSH host key algorithms
I'm currently writing a report for my Master's degree on the SSH protocol. Quite interesting!
However I'm having trouble getting into the inner workings of the host key algorithms.
For example, ...
0
votes
0answers
51 views
Security implication of concatenating two hashes using different algorithms
Background
Hashing files is an expensive thing for CPU. I am tasked to write a secure digital signature scheme. For that, I decided to check the integrity of files using Hash/Digest.
To be more secure,...
0
votes
0answers
55 views
Should I update my fedora encrypted system?
I have installed my Fedora Workstation version 23 using native disk encryption. Since it, I am upgrading it using dnf system-upgrade plugin. Today, I have fedora 32. Some time ago, I’ve discovered ...
0
votes
0answers
26 views
stitched aes_128_cbc_hmac_sha1 encrypt-then-mac
Is there implementation of stitched aes_128_cbc_hmac_sha1 encrypt-then-mac?
I can only find mac-then-encrypt implementation in OpenSSL 1
How hard is it to change to encrypt-then-mac and compile it?
