Comment

Comment by bawolff

Presumably they are referring to length extension attacks. You can't pull them off if you truncate. https://en.m.wikipedia.org/wiki/Length_extension_attack

Generally though length ext attacks have a solution - HMAC, which is much more secure than truncate.

The more you truncate, the more vulnerable you are to birthday attacks (practically speaking you would have to truncate quite a lot)

parent bawolff 4 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton