News for hackers. Stuff that matters.

A comment on A Rust-based TLS library outperformed OpenSSL in almost every category. Parent comment

Re:A Rust-based TLS library outperformed OpenSSL in almost e... by brobinson on Friday July 19, 2019 @05:57PM (#20482787)
Isn't SHA-256 vulnerable to length extension attacks?
[ Parent | on HN ]
Re:A Rust-based TLS library outperformed OpenSSL in almost e... by unscaled on Friday July 19, 2019 @06:26PM (#20482949)
Yes, but so is SHA-384 and that is not relevant for the TLS context.
[ Parent | on HN ]
Re:A Rust-based TLS library outperformed OpenSSL in almost e... by MerryMage on Friday July 19, 2019 @07:44PM (#20483320)
384 is not vulnerable to length extension attacks precisely because it is truncated. The output is not he full internal state.

The speed advantage of SHA-512 and the advantage of truncation is why some more exotic variants like SHA-512/256 (SHA-512 truncated to 256 bits) are used in newer protocols.

[ Parent | on HN ]