So many people are getting the SHA1 story wrong. With the collision that Google released, *anyone* can create colliding PDFs for *free*.
-
-
Replying to @davidstalane
There is no evidence that SHA-3 is more (or less) secure than SHA-2.
1 reply 0 retweets 0 likes -
Replying to @marcan42 @davidstalane
I never said that, just that it's not susceptible to this type of length extension attack.
1 reply 0 retweets 0 likes
Replying to @CubicleApril @davidstalane
This isn't really a length extension. If you can collide SHA-3's internal state it works too.
6:21 AM - 24 Feb 2017
0 replies
0 retweets
2 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.