Questions tagged [sha-256]
SHA-256 is part of the SHA-2 family of hash functions with a 256-bit output and a 128-bit security level.
1
vote
1answer
40 views
Use partial hash to verify entire hash
I've had an idea about storing parts of SHA256 hashes and I'd like to find out how secure it is, or how much less secure it is than storing the entire hash.
For example, users can share this list of ...
0
votes
1answer
36 views
Hash Collision Probabilities
Please give help! how can I calculate the probability of collision? I need a mathematical equation for my studying.
Assume, I am using SHA256 to hash 100-bits. Thus:
SHA256 {100} = 256-bits (hash ...
-2
votes
1answer
65 views
Is it possible to convert the output of sha256 hash to binary or decimal value? [closed]
Can the output value of the sha256 hash function be converted to binary or decimal number? I know that the output is a set of 256bits. Is it possible to convert the output data to an unique ...
4
votes
2answers
192 views
If you wrote a reversible SHA-256 algorithm, how many “metadata” bits would be required for reversability?
I was reading about reversible computing while thinking about FPGA circuits. I realized that it would be possible to write a reversible SHA-256 algorithm if you stored some additional information as "...
14
votes
1answer
3k views
What are the consequences of removing a single byte from a sha256 hash?
I'm working on a system (Ethereum) where it is significantly cheaper to store 32 bytes than 33 bytes. I'd like to create a table where data is stored based on its hash.
Sha256 would meet this ...
-3
votes
1answer
100 views
48
votes
11answers
14k views
How do hashes really ensure uniqueness?
This might seem an impractical and unnecessary conversation, but I feel it's something I need to clarify. Especially, as I just got my first developer job in a blockchain startup.
So hashes are said ...
3
votes
1answer
199 views
Is SHA1 secured enough as a PRNG
I read SHA1 is still a secured hashing function with no collision found as of now. However, it's just a matter of time for someone to come up with such a collision or attack. Therefore, in new ...
2
votes
1answer
105 views
Practical quantum attacks on SHA256 MAC and HMAC
Is SHA256 MAC (or HMAC) vulnerable to any quantum attacks?
Game setup:
The attacker's goal is to produce a valid MAC to be accepted by other devices in the ecosystem. The ecosystem consists of ...
0
votes
2answers
70 views
Can I find the IV of a single block of SHA256, given the plaintext and digest?
Each 512-bit block of SHA256 takes an initialization vector (IV) and message schedule and returns a digest. Knowing the message schedule and resulting digest, is it feasible to reverse the algorithm ...
19
votes
5answers
2k views
How many hex digits do I need to compare when manually checking hash functions?
I sometimes run sha256sum on large files after transferring them from one place to another, and will just skim the hash output to verify it's correct. But, I usually just look at the first/last 5 or 6 ...
-1
votes
1answer
246 views
Signing with RSA-SHA256 algorithm using EC keys
Is it practical to sign a data using RSA-SHA256 algorithm with EC keys?
I used a small NodeJS script and crypto module (uses openSSL internally) to test this and I could successfully sign the data ...
-2
votes
2answers
146 views
VeraCrypt a weak point [closed]
Biggest flaw in VeraCrypt(or other Encryption programs) is Hash Algorithm.
VeraCrypt hashes (SHA,Whirlpool,Streebog) it is the only point where can break an encrypted disk. Because break algorithm (...
2
votes
1answer
65 views
Why is a 1 added after the message input and before adding padding zeros (if necessary) when using SHA256 or RIPEMD160? [duplicate]
In preparing an input for SHA256 or RIPEMD-160 a single bit (1) is appended to the message before adding any necessary zero padding and before adding the bitlength (64 bits) to form 1 or more 512 bit ...
0
votes
1answer
81 views
SHA's finite character set and collision
From what I've researched, SHA's hex encoded string contains the characters [a-fA-F0-9]. If we represent it in Base64, it can contain ...
1
vote
1answer
56 views
Does having an SHA256 hash compromise PBKDF2 secrecy?
If I have a password pwd, and I hash it with SHA256 and send it to a server for authentication (server will apply ...
8
votes
2answers
392 views
Which attacks are prevented by the different initial hash values for SHA-2 with truncated output?
NIST specified SHA-2 hash functions with truncated output. Those hashes use different initialization values than SHA-256 or SHA-512. SHA-224 is based on SHA-256. SHA-384, SHA-512/224 and SHA-512/256 ...
0
votes
2answers
110 views
Possible SHA-256 implementation weakness
I came across a SHA-256 implementation that seems not to conform to the standard and because I can't change the implementation I would like to know if it's safe for use or can be a potential weakness.
...
0
votes
2answers
138 views
Can I update sha-256 digest chunk-wise instead of the whole array at once?
I'm not sure whether this questions is about SHA-256 algorithm itself or the particular implementation I'm using.
Usually, a hash algorithm implementation has functions, let us call them update and ...
0
votes
1answer
55 views
Is it safe to hash a packet with a shared secret to prove authenticity?
I am developing an online game, where the server is written in Node.js and the client uses Godot. The issue is that Godot has no cryptographic functionalities (it can only encrypt and decrypt files, ...
2
votes
2answers
133 views
Does Diffie Hellman guarantee secrecy?
I am studying my Cryptology exam and one question I got stuck below;
Recall the Diffie-Hellman key establishment protocol. Alice runs this protocol over
the Internet to communicate with Bob. ...
2
votes
1answer
82 views
SHA-256 Hash identical on two similar but not exact items
There are two discs that we have that have all the same files. However, using a new method for burning the discs, the second disc had modified file dates of 5/30/2018 while the original disc has dates ...
1
vote
1answer
209 views
HMAC SHA256 for deriving session keys using random nonce
I need to derive session key in order to create an application layer secure channel between mobile app and a bluetooth device. My scheme is similar to
this scheme that uses a HMAC and counter.
...
3
votes
1answer
233 views
Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?
PBKDF2 should only be used to generate a larger output than the hash function it uses if the output is used in such a way that it has a flat keyspace. As far as I am aware, XTS does not have a flat ...
4
votes
1answer
724 views
Are hash functions strong against quantum cryptography and/or independent enough of mathematics?
I work on ethereum and other blockchain technologies. And seeing that quantum pc's are someday going to see the light I have some questions / doubts.
I was wondering if hash functions are strong ...
1
vote
1answer
590 views
AES-CBC then SHA vs AES-GCM for encrypting and authenticating a web token
I am trying to have something like JWT but kinda ad hoc and encrypted. The token itself is simply a stringified JSON that contains the user ID and Unix timestamp.
Now, I tried to use AES-128-GCM, ...
-4
votes
1answer
85 views
How to reversely compute from hash [closed]
What are practical methodologies to derive the following ciphertext:
1bd0d370b262d748b21c40cc7e5746642b4c06079a224c65e443e429289753c2
0
votes
2answers
228 views
What would the implications be of a single randomly discovered SHA-256 collision? [closed]
Imagine if someone messing around with hashes accidentally came across two inputs to SHA-256 that produced the same output. Not a concerted effort, not Google/NSA or crypanalysis. No tin foil hats. ...
-1
votes
1answer
163 views
How are multiple iterations of SHA-256 handled for longer inputs?
I wrote a python program to perform the SHA-256 function. It works just fine until I try to hash longer strings.
If I hash (in HEX)
...
2
votes
1answer
72 views
Why is modulo being used for congruence in SHA-2 padding when the outcome is always the same?
I am reading up on SHA-2 algorithms and I came across this paper: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf
In section 5.2.1 it talks about the formula for padding a message. There ...
0
votes
0answers
30 views
Can a hash-input be the same as the hash-output? [duplicate]
Could it be that (i.e. for SHA-2) the hash-output is identical to the input or is this deliberately prohibited by some sort of mechanism?
24
votes
4answers
12k views
How can hashes be unique if they are limited in number? [duplicate]
I'm curious, how can for example SHA-256 be unique if there are only a limited number of them?!
For clarification:
how many MD5 hashes are there?
$16^{32}$ MD5 hashes can be produced.
$16^{64}$ SHA-...
-1
votes
1answer
1k views
Generating AES-256 Private Key from user string
So I wish to encrypt a string using AES-256 and want to provide the user to specify the password for unlocking the string. I plan to use sha-256 to hash to users entered password and use this as the ...
0
votes
2answers
141 views
In a very simplistic and step by step example, how do I get the 'w' values for SHA256?
I've been to https://docs.google.com/spreadsheets/d/1mOTrqckdetCoRxY5QkVcyQ7Z0gcYIH-Dc0tu7t9f7tw/edit#gid=1194752368, http://www.righto.com/2014/09/mining-bitcoin-with-pencil-and-paper.html, and https:...
0
votes
1answer
248 views
MAC size 128 bits or more?
Just a quick question:
I've seen implemented BouncyCastle's class AeadParameters with MAC length of 128 bits, which was allegedly recommended.
Though when I looked up HMac to implement my own MAC in ...
1
vote
2answers
283 views
Why SHA-256 (or any other) is too fast for passwords but “slow” for collisions to be found?
Normally, the standard answers of why passwords shouldn't be stored using a groups of hash algorithms, including SHA-256 or higher, even if salted, are "because they are 'fast' hashes", "the attacker ...
0
votes
1answer
53 views
SHA algorithim with different hash value
I am new in hash cryptography. I am trying to build the sha256 hardware accelerator. I am thinking about using the different hash value to optimize the performance. I am trying to fetch custom hash ...
0
votes
0answers
104 views
GPG AES-256 Malleability
If Alice encrypts a file with GnuPG software using the AES-256 mode, and sends the encrypted file over an insecure channel (like E-mail or HTTP) to Bob. Both Alice and Bob know the password, but only ...
1
vote
2answers
265 views
Optimal way to bind two hashes
Currently I have:
H1 = SHA256
H2 = SHA1
Both H1 and H2 have fixed length. What's the most efficient way to bind H1 and H2 together into H3? The goal is to ...
0
votes
1answer
49 views
Security of using sha(secret + rand)
I have come across some security implementations in which party A will compute MD = sha256(secret + rand) and transmit MD and rand to a counterpart B. If the second party knows the secret, then when ...
0
votes
2answers
466 views
Probability last character sha256 hash
A quick question. I want to use the last character of a SHA256 hash (blockhash of a bitcoin block) as my random source. Is 100 /16(amount of different chars) = 6.25% true for all characters or are ...
1
vote
1answer
222 views
Confused about Merkle Damgard Transform - short messages?
With the Merkle Damgard Transform, how does it handle messages that are shorter than the input message length - hash digest length? Or in other words, how is the last block handled? So for example, if ...
2
votes
1answer
2k views
Difference between SHA 512, SHA 512 Half, SHA 256
I was trying to create a python wrapper for RIPPLE crypto currency, and i ran into SHA 512 half which i have no idea or reverse googled it to no avail. Can someone help me understand the difference. ...
0
votes
0answers
32 views
For any 256 bit string, is there some input to SHA256 that produces this string? [duplicate]
For any random 256 bit string, is there any guarantee that there exists a string which, given as input to SHA256, will produce this string?
11
votes
2answers
9k views
Do identical strings always have the same SHA-256 value?
If you hash a string using SHA-256 on your computer, and I hash the same string using SHA-256 on my computer, will we generate the same value? Does the algorithm depend on a seed (so we'd both need ...
1
vote
1answer
211 views
HMACSHA256 2.5 times faster than HMACSHA512
According to the answers to a previous question, the 512 version should be faster on x64 devices. And even if it were executed on an x86 (32 bit) device - there shouldn't be such a big difference.
...
2
votes
2answers
2k views
What happens if a SHA-256 input is too long (longer than 512 bits)?
What I understand is: When we parse a message into 512 bit message blocks. Then we extend the first message block to 64 entry array and start with the compression function.
What happens if the ...
1
vote
1answer
415 views
Forward Patterns in SHA 256
Would it be possible to find a correlation between the inputs of SHA 256 and it's outputs? More specifically, by using deep learning, would there exist a correlation between the inputs of an SHA 256 ...
-3
votes
1answer
126 views
Secure password storing mechanism [closed]
I recently thought about a secure password storing mechanism.
I wanted to ask if the following password storing mechanism is resistant against rainbow tables with a secure password and the attacker ...
1
vote
1answer
360 views
How exactly is the input message of SHA-256 (pre-)processed?
I’m very interested how SHA-256 handles messages, but I’ve got 3 questions. (As I have already read in some answers before, SHA-256 is not directly performed on the message but on an array, thanks for ...
