SequenceHash

Security firm Trail of Bits has published SequenceHash, a tool it describes as multihashing "for the rest of us." The announcement introduces an approach to computing multiple hash functions over the same data more easily, aiming to make a technique common in cryptography and security engineering accessible to ordinary developers. Discussion among engineers is centered on the tool's practical uses and design.

Security firm Trail of Bits says combining multiple values into a single hash is easy to get wrong, and those mistakes can enable forgeries. It notes TupleHash addresses the problem but only works with Keccak, while outside SHA-3 developers often roll their own, insecure multihashing. The firm has built SequenceHash, a length-suffixed construction that works with any hash function.