News for hackers. Stuff that matters.

A comment on Preventing Timing Attacks on String Comparison with Double HMAC Strategy (2015).

Re:Preventing Timing Attacks on String Comparison with Doubl... by dorianmariefr on Sunday November 21, 2021 @09:54AM (#29296539)
so hash(input) == hash(secret) ?
[ Parent | on HN ]
Re:Preventing Timing Attacks on String Comparison with Doubl... by pornel on Sunday November 21, 2021 @02:01PM (#29298748)
No, `hash(hash(input)) == hash(hash(secret))`.
[ Parent | on HN ]
Re:Preventing Timing Attacks on String Comparison with Doubl... by justinsteven on Sunday November 21, 2021 @06:06PM (#29300691)
No, `hmac(key=key, message=input) == hmac(key=key, message=secret)` where key is either a static secret key for comparison purposes, or random for each comparison.
[ Parent | on HN ]