Re:Illegal Hashes
by nayuki on Monday November 28, 2022 @07:25PM
(#33781934)
I suspect second preimage attacks are easier because with the given message0, you can see the internal state of the hash function on message0 while you tweak your message1. Whereas in preimage attacks, you are only given the final hash.
[ Parent
| on HN ]
Yeah - I would imagine with some hash functions it doesn't make much difference whether you have access to message0, or just the hash of message0. Whereas with other hash functions it might make a lot of difference.
It's never going to be better to only have the hash vs having the message itself though.