Skip to content

Comment on On cryptography and dogmasparent

Comments

You protect yourself against any future weakness in the hash where it would be possible to simplify composed calls.

You say

So it is quite natural that the schema I proposed of computing SHA1(SHA1(SHA1(..))) will just do that, adding rounds to SHA1. So for the fundamental properties of SHA1 it should be computationally unfeasible to write a function SHA1000 that is equivalent to 1000 times SHA1 nested but that can be computed easily.

This is logic, but puts too much faith in SHA-1.

Crypto is hard because you assemble black boxes which never fully satisfy the advertized properties.

Nevertheless I think the best is to make it easy to change the algorithm as you will always find someone to tell you it's not secure enough.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.