News for hackers. Stuff that matters.
Re:Why you should never use hash functions for message authe... by jcoglan on Saturday June 09, 2012 @03:18PM (#4089013)
Possibly, although it depends on the lifetime of the link and the size of the tag (e.g. SHA-1 is 40 chars, each case requires mean of 8 guesses, so whole thing only requires 320 requests).

Better to have resistance as baked into your crypto as you can, rather than relying on a firewall further up the stack. If the data itself is resilient, no implementation will be able to defeat it efficiently.

There are no comments on this comment yet.