Re:SHA-3 Buffer Overflow
by hasa on Friday October 21, 2022 @03:40AM
(#33285536)
It may be dumb question, but is there any realistic use case to use this vulnerability to reveal SHA-3 hashed secrets? Or is it just that attacker can crash systems with suitable input?
[ Parent
| on HN ]
Re:SHA-3 Buffer Overflow
by 6LLvveMx2koXfwn on Friday October 21, 2022 @03:50AM
(#33285600)
From the article:
I’ve shown how this vulnerability in XKCP can be used to violate the cryptographic properties of the hash function to create preimages, second preimages, and collisions. Moreover, I’ve also shown how a specially constructed file can result in arbitrary code execution, and the vulnerability can also impact signature verification algorithms such as Ed448 that require the use of SHA-3. The details of these attacks will be made public at a later date.