Adding a nounce before hashing as covert channel

Andrew Gallagher andrewg at andrewg.com
Wed Dec 11 15:26:54 CET 2024


On 11 Dec 2024, at 11:33, Frank Guthausen <fg.gnupg at shimps.de> wrote:
> 
> Are there any good solutions to the problem (workflow, best practice)
> besides hoping the hash algorithm will prevent such an attack in
> reasonable time?

Avoiding hash collisions is the entire point of a hash algorithm. An external salt doesn’t make it more difficult for an attacker to find a hash collision, but it prevents an attacker from finding a *useful* collision in advance.

A




More information about the Gnupg-devel mailing list