Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #7
Trail of Bits releases SequenceHash to fix insecure multi-value hashing
Original: Hashing several values together is easy to get wrong, and the mistakes can lead to forgeries. TupleHash only works with
Security firm Trail of Bits says combining multiple values into a single hash is easy to get wrong, and those mistakes can enable forgeries. It notes TupleHash addresses the problem but only works with Keccak, while outside SHA-3 developers often roll their own, insecure multihashing. The firm has built SequenceHash, a length-suffixed construction that works with any hash function.
Why now: Trail of Bits just announced a new cryptographic tool addressing a common, exploitable hashing mistake.
Trail of BitsTupleHashSequenceHashSHA-3Keccak
Evidence
- Hashing several values together is easy to get wrong, and the mistakes can lead to forgeries. TupleHash only works with Keccak. Outside SHA-3, people roll their own multihashing, often insecurely. We built SequenceHash to fix that for any hash function, with length-suffix… · trailofbits@infosec.exchange · 2
API: https://socialmediatrends-api.osmike.com/v1/trends/728174