Collaborate Disseminate
When I say similar, I’m referring to the Hamming distance, the Levenshtein distance, or a similar string distance metric that measures how similar or dissimilar two strings are.
For instance, are there two plaintext strings … Continue reading For a hashing function like MD5, how similar can two plaintext strings be and still generate the same hash?
If I generate 128 bit, 512 bit and 1024 bit random strings using either:
A native rand() function (C, PHP, Python, etc)
OpenSSL random bytes
Hardware generated random number
And hash the random string using one of these h… Continue reading How long will it take to crack a hashed random string
I am able to access a certain website https://buzzlightyear.acme.com:68080 from within a corporate network (Obviously the default https port 443 has been allowed in the windows firewall of the machine buzzlightyear.acme.com)…. Continue reading Web Site Access – Port Whitelisting
From the:
Abusing SHA-1 collisions for Chromium updates
https://news.ycombinator.com/item?id=20114809
https://github.com/NixOS/nixpkgs/blob/master/pkgs/applications/networking/browsers/chromium/update.nix#L96
Why would Ch… Continue reading Why would Chrome return non-deterministic bytes for a versioned release?
I’ve read about why MD5, SHA1, and many other hashing functions are insecure, by a lot, but I’m thinking of doing a different approach.
It won’t increase security, I’m aware of that, but I believe it can make cracking the ha… Continue reading Disguising the type of hash used
I’m generating 128 bit API keys. AFAIK 128 is totally secure for generated key. In the DB I want to store hashes, not the plain text (to be protected against DB leak), but what hashing algorithm should I use? MD5 and SHA-1 ar… Continue reading Which function to hash 128 bit API key with?
Recently we outsourced some work for a website. While reviewing this code I came across the password hash function.
I am in no way a security expert besides some basic knowledge (hence outsourcing this), Nontheless it raised… Continue reading How secure is this combined sha1/md5 hash
Whenever I need to generate a token (email account confirmation, password reset, remember me cookie, view email in browser etc) I generate a string of random bytes (typically 32 using the Fortuna PRNG) and use PBKDF2 to creat… Continue reading Safe to switch from PBKDF2 to SHA-1 for token verification?
Let’s say I have an input message of “enoughly long” length (I’ll got for a 128 bytes long message, but it might be 256 or whatever).
I know the hash sha1(message || secret) where || is byte concatenation.
Since the message… Continue reading Can one alter SHA-1 input data without changing the hash internal state?
Bitcoin’s great, if you sold at the end of 2017. If you’re still holding, your opinion might be a little more sour. The cost to compete in the great hashing race continues to rise while cryptocurrency values remain underwhelming. While getting involved at the top end is prohibitively expensive, you …read more
Continue reading Mining Bitcoin on the ESP32 For Fun, Definitely Not Profit