1
vote
Accepted
Generic attack on Hmac sha256
There are no known practical generic attacks on HMAC-SHA256. Brute-force attacks are generic, but are not practical.
- 5,256
1
vote
Accepted
Avoid hash flooding without a secret key?
As you mention in one of your comments, if you cannot trust the client to not make a hash flooding attempt, then you cannot trust the client to give proper hashes. The hash would have to be recomputed ...
Only top scored, non community-wiki answers of a minimum length are eligible