News for hackers. Stuff that matters.

A comment on jsSHA - A JavaScript Implementation Of The Entire Family Of SHA Hashes. Parent comment

Re:jsSHA - A JavaScript Implementation Of The Entire Family ... by Cyranix on Wednesday December 05, 2012 @12:22AM (#4875018)
Can you clarify "broken"? In this context there is a world of difference between "inaccurately implemented" and "slow".
[ Parent | on HN ]
Re:jsSHA - A JavaScript Implementation Of The Entire Family ... by hdevalence on Wednesday December 05, 2012 @01:13AM (#4875150)
There's a nice article here:

http://www.matasano.com/articles/javascript-cryptography/

that explains some of the issues with JavaScript-based cryptosystems.

[ Parent | on HN ]
Re:jsSHA - A JavaScript Implementation Of The Entire Family ... by saurik on Wednesday December 05, 2012 @01:26AM (#4875183)
Note: these arguments only apply to JavaScript in a browser (and at that point, apply to virtually any client-side system attempting to somehow protect information from being snooped on by the server that dynamically provides the code to execute on the client <- an idea that should have been preposterous from the start ;P).
[ Parent | on HN ]