Hot answers tagged

1 vote
Accepted

Generic attack on Hmac sha256

There are no known practical generic attacks on HMAC-SHA256. Brute-force attacks are generic, but are not practical.
1 vote
Accepted

Avoid hash flooding without a secret key?

As you mention in one of your comments, if you cannot trust the client to not make a hash flooding attempt, then you cannot trust the client to give proper hashes. The hash would have to be recomputed ...

Only top scored, non community-wiki answers of a minimum length are eligible