HMAC security - Is the security of the HMAC based on SHA-1 affected by the collisions attacks on SHA-1?

前端 未结 3 1570
执念已碎
执念已碎 2021-01-01 23:15

Is the security of the HMAC based on SHA-1 affected by the collisions attacks on SHA-1?

3条回答
  •  难免孤独
    2021-01-01 23:49

    See this question for a discussion on the same theme. In a nutshell: collision attacks do not directly harm HMAC. But the existence of collision attacks implies that the compression function on which the hash function is built is not a "random oracle", and this voids the HMAC security proof.

提交回复
热议问题