Skip to main content

Questions tagged [sha-1]

SHA-1 is a hash function that is two generations old, no longer considered secure for all uses and should only be used for backward compatibility.

16 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3 votes
0 answers

Are there "light" versions of cryptographic hash functions?

After tinkering with cryptographic hash functions, I started wondering if they do have counterpart functions that would imitate their cryptographic properties but with a lower level of strength in ...
Ryan B.'s user avatar
  • 153
2 votes
0 answers

What technical flaw in the Secure Hash Standard was the NIST referring to?

On July 11, 1994, the NIST proposed an interesting revision to FIPS 180, about the Secure Hash Standard: A revision of Federal Information Processing Standard (FIPS) 180, Secure Hash Standard (SHS), ...
Patriot's user avatar
  • 3,132
2 votes
0 answers

Is it possible to prevent length extension attacks

Is it possible to prevent length extension attacks without using any other hash algorithm than SHA-1?
Ashley Watson's user avatar
2 votes
0 answers

*feasible* pre-image attacks against reduced SHA-1

(tldr: see last paragraph) Although SHA-1 is vulnerable to collision attacks, it is still resistant to pre-image attacks. SHA-1 was designed to be resistant until a brute-force attack of $2^{160}$ is ...
Albert Hendriks's user avatar
1 vote
1 answer

SKI-based authentication

The idea is to authenticate the TLS peer by verification of the SHA-1 hash of his public key (aka SKI). So Alice meets Bob in person and they exchange SKIs of their public keys. When later they ...
Alex's user avatar
  • 11
1 vote
0 answers

What is more secure, HMAC with SHA-1, or with SHA-256 and take a substring?

I'm going to guess the latter, but just wanted to ask here. I want to have a relatively short signature, and my goal is to take a substring of the resulting hash.
Gregory Magarshak's user avatar
1 vote
0 answers

Coursera Course or book(s) That covers the following subjects: OPENSSL, SSH, PKI, MD5, RSA, Certificates, keys, signatures

I started working as a developper in a cryptography company 3 months ago where the applications are for mostly windows applications. I found that I don't have enough knowledge concerning the topics ...
Hani Gotc's user avatar
  • 119
1 vote
0 answers

vec_sel in SHA-1

I can't find what is vec_sel() in this optimization from Wikipedia: Instead of the formulation from the original FIPS PUB 180-1 shown, the following equivalent ...
Eric's user avatar
  • 111
1 vote
0 answers

Kerberos Use of SHA-1

A lot of good information on Kerbero's encryption methods discussed here, but I there is a second question that arises. Does use of SHA-1 in the overall algorithm weaken Kerberos? If so, will ...
PrometheusRising's user avatar
1 vote
0 answers

GlobalSign cert in Trusted root for Google Services shows Sha1. Security postures

"GlobalSign" certificate in Trusted Root Certification Authorities for Google Services shows Sha1. Security postures are different than just 2-3 yr ago. At my home, router bought 2016, networked; ...
Tom Hege's user avatar
1 vote
0 answers

Nature of risk(s) from KeeChallenge XML file stored in cloud at Onedrive

As a noob user of KeePass2 on Windows desktop and Keypass2Android on my phone, supplemented by YubiKey Neo configured for hmac-sha1 challenge response, I noticed that Keepass2Android appears to store ...
greybeered's user avatar
0 votes
0 answers

Is a reduced character space pre-image attack possible for SHA-1?

Given a hash cipher f(sha1($pepper . $plaintext)) where f is some transformation to an 11-byte string pepper is 24 bytes long with a character space of 62 (and is ...
Carmina Martin's user avatar
0 votes
0 answers

On the exposition of SHA-1 attack (known_prefix + user_input + backend_secret)

In this question on sha1(known_prefix + user_input + backend_secret), an answer states that is realistically possible to find the first few bytes of ...
wjwrpoyob's user avatar
  • 101
0 votes
0 answers

Time by "crypto_shash_digest"

I am trying to calculate the time consumed to run SHA1 in the kernel level. I had run the upper codes (inside a for loop) and the following was my result. It first showed about 30micro seconds and ...
Telemore's user avatar
0 votes
0 answers

Security implication of concatenating two hashes using different algorithms

Background Hashing files is an expensive thing for CPU. I am tasked to write a secure digital signature scheme. For that, I decided to check the integrity of files using Hash/Digest. To be more secure,...
Eirtaza's user avatar
0 votes
0 answers

Should I update my fedora encrypted system?

I have installed my Fedora Workstation version 23 using native disk encryption. Since it, I am upgrading it using dnf system-upgrade plugin. Today, I have fedora 32. Some time ago, I’ve discovered ...
vdTOG's user avatar
  • 13