Re:Maybe Skip SHA-3
by baby on Thursday June 01, 2017 @04:46AM
(#14458821)
1. Yes. And people do that. I'm nkt talking about me. I'm talking about things I see in my work (I'm a consultant).
2. People should be able to do that. If you're expecting your hash function to behave somehow like a random oracle there is no reason that h(key|data) doesn't work. I see people using sha-2 to derive keys all the time. Even this is unsafe depending on how you do it.
2. People should be able to do that. If you're expecting your hash function to behave somehow like a random oracle there is no reason that h(key|data) doesn't work. I see people using sha-2 to derive keys all the time. Even this is unsafe depending on how you do it.