Comment Comment by arnarbi "... with 32 bit keys."The whole thing is editorialized to make it sound like the problem is with JWTs. It's not, this is just plain old improper use of perfectly good crypto.Brute-forcing 32 bit HMAC keys isn't exactly newsworthy. parent arnarbi 9 years ago
The whole thing is editorialized to make it sound like the problem is with JWTs. It's not, this is just plain old improper use of perfectly good crypto.
Brute-forcing 32 bit HMAC keys isn't exactly newsworthy.