5 votes
Accepted

Are RSA-SHA256 signatures prone to length extension attacks?

But what if I sign a message with RSA and SHA-256? Are they safe? Length extension attacks are not a concern. Here is what a length extension attack allows you do to: if you are given the hash $\text{...
  • 134k

Only top scored, non community-wiki answers of a minimum length are eligible