Secure Hash Algorithm is a family of cryptographic hash functions published by NIST.

learn more… | top users | synonyms (1)

1
vote
2answers
73 views

If I only know part of a password and part of the hash is it possible to get the full password?

I'm trying to learn more about hashes and cryptography and doing my own pentesting, but I seem to be stuck on this problem. The hash function being used is SHA1. If I'm trying to determine a ...
1
vote
0answers
17 views

Should SHA-1 be used with PKCS #1?

I came across this excellent question and answer: Should SHA-1 be used with RSA-OAEP but it only covers RSA-OAEP. RSA-OAEP is not the only place in PKCS #1 where a hash function is used. Should we ...
34
votes
5answers
5k views

Should I trust a website which uses a SHA-1 HTTPS certificate?

I am on a website where I need to pay for something. This website has the following warning in the top left: This site uses a weak security configuration (SHA-1 signatures) so your connection ...
1
vote
1answer
35 views

Possible number of collisions in a hashing function with constant message size

Jumping to conclusions from my question, can we predict possible number of collisions for a given message in a given hashing algorithm. Say I am using SHA-1 which outputs 160 characters string, and ...
-1
votes
1answer
57 views

Shouldn't multiple images always exist even in most powerful hashing algorithm?

I have a confusion in mind that since in hashing we transform a large string into a smaller fixed size string, so its unlikely that any large string has a unique hash. There had to be collisions and ...
-5
votes
1answer
84 views

Time to break SHA-512 [closed]

From http://stackoverflow.com/questions/6776050/how-long-to-brute-force-a-salted-sha-512-hash-salt-provided, to break SHA-512 with brute force strategy, it require 3,17 * 10^64 years. It is almost ...
0
votes
2answers
52 views

How to properly hash a key? big vs small digest

We have to roll (decommission) database access keys often, but it's important to know which key each system is using in order to avoid removing a key in use thus creating unavailability. We want each ...
3
votes
1answer
233 views

Why does my SHA256 certificate get encrypted with 168 bit 3DES?

We use S/Mime certificates for internal emails within our company. The certificates signature algorithm are all SHA256RSA with a hash of SHA256. I have confirmed the public keys are RSA(2048bits). ...
3
votes
2answers
281 views

Why is 128bit AES considered very strong but 160bit SHA depreciated?

Why is 128bit AES considered very strong but 160bit SHA 'insufficiently secure'? Google/chrome/browsers seems to drop support for SHA1 SSL certificates. I assume it's more simple to calculate SHA than ...
3
votes
1answer
43 views

SHA 1 no impact to root certificate

I ran a scan on a server and the results of the authentication for digital certificate was as follows : Certificate 1 (root) signature algorithm: Sha256withRSA Certificate 2 (chain of trust) ...
1
vote
2answers
68 views

Upgrading security of hashed passwords [duplicate]

Let's say we have a database with usernames and passwords, where the passwords are naively secured using a single round of SHA-1 (such as was kinda best practice a number of years ago). Now, let's ...
3
votes
1answer
69 views

Is SHA1 / PBKDF2-HMAC-SHA1 indissociable from random data?

I want to make sure that the result of PBKDF2-HMAC-SHA1 is indissociable from random data (given random parameters). Basically, PBKDF2-HMAC-SHA1 looks like just a bigger SHA-1 hash, which is normal ...
3
votes
2answers
175 views

Is signing android apk file with SHA1 digest secure enough?

Google command line example for signing apk files: $ jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1 -keystore my-release-key.keystore my_application.apk alias_name source: http://developer....
6
votes
2answers
1k views

Can I use SHA-512 hash as AES key?

I want to combine hashing and encryption for better security. So can I use a hash key generated from SHA-512 as a key in AES. For example, I have a password "secret", I calculate SHA-512 hash for it ...
6
votes
2answers
173 views

How is SHA-1 insecure if it is not vulnerable to what MD5 is?

I have been hearing a lot lately about how SHA-1 is no longer going to be used because of how weak and insecure it is, but if it is not vulnerable to collisions like MD5 is, then how is it weak and ...
0
votes
1answer
84 views

Checking a salted hash against known password?

I've created a mysql dump of my users and passwords and awked them into a presentable form: Passwords: '...
5
votes
2answers
154 views

Why is weakness of SHA-1 considered a threat to TLS security

If I understand correctly the role that a hashing algorithm (e.g. SHA-1) plays in TLS certificates is as follows: The hashing function is applied to a subject's public key. The CA then uses their ...
1
vote
2answers
76 views

Reissuing certificates with SHA-2

I recently setup my own CA, and imported the CA cert into devices across the company. I then deployed certificates to our various servers, etc.. All using SHA-1 signatures (the default in the tool I ...
7
votes
2answers
542 views

Will Google block HMAC-SHA1 along with SHA1 signed certificates?

So, right now, there is a push for moving from SHA1 signed certificates to SHA256 signed certificates by Google. My understanding is that you cannot use SHA1 for signing certificates but HMAC-SHA1 can ...
2
votes
1answer
42 views

Online shops SSL certificates and VISA/MasterCard

Is it still allowed to use SHA-1 certificates on VISA/MasterCard payment pages? If yes, will it be prohibited and when? I know about browsers are going to show it as non-secure after some time, but ...
5
votes
2answers
143 views

Why are we using SHA3-512?

As we know, hash algorithms can be used for authenticity of a message. In my understanding, since the message lengths are too large, we convert it into a hash value using hash algorithms and these ...
4
votes
1answer
97 views

Should my company change the internal Root CA hash method from SHA-1 to SHA-2?

My company have a Root Certificate Authority which is installed on a Windows Server 2003 and uses SHA-1 as hash method. We will migrate to Windows Server 2012. Checking the root certificates of my ...
4
votes
1answer
142 views

Should SHA-1 be used with RSA-OAEP?

PKCS#1 defines SHA1 as a default hash function and all implementations support this hash function and the mask generation functions based on SHA1. In some implementations you can change the hash ...
2
votes
1answer
273 views

Microsoft and SHA-1 deprecating on Windows 7

Microsoft states: Effective January 1, 2016, Windows (version 7 and higher) and Windows Server will no longer trust any code that is signed with a SHA-1 code signing certificate and that ...
15
votes
7answers
9k views

Deprecation of SHA1 code signing certificates on Windows

I have been keenly following the issues with regards to Microsoft deprecating the use of SHA1 code-signing certificates for Windows executables (http://social.technet.microsoft.com/wiki/contents/...
34
votes
4answers
4k views

Does every hash value have an inverse value?

There are many different hash functions, md5, sha, and others. They take a value V and produce a H via transformation Function(V) = H, where Function is md5, sha, etc. My question is: Does every hash ...
2
votes
2answers
85 views

Is this a secure Digital Signature + Encryption method?

I am trying to wrap my head around Digital Signatures and how RSA Encryption supports them. And which order to do them along with what specifically to encrypt. So say we have Alice and Bob and a ...
18
votes
4answers
4k views

Have weaknesses in SHA-1 and MD5 ever actually been successfully used in an attack?

Pretty much every guide, how-to, and reference for dealing with passwords and hashing has a warning in big or bold letters stating something along the lines of: SHA-1 and MD5 are NOT secure and ...
0
votes
1answer
53 views

Software activation “by phone” [closed]

I'm a software developer, and I would like to protect my application in an offline way, like many software do activating by phone. Following a screenshot taken from google images on what I would like ...
0
votes
1answer
92 views

Can SHA1 certificate be used for SHA256 cipher?

I have two Windows 2008 R2 domain controllers configured with TLS 1.2. Both certificates are SHA1-RSA. I captured network traffic between two DCs while running LDAPS (LDP.EXE). It seems TLS 1.2 was ...
2
votes
0answers
59 views

cracking krb5 passwords (des3-hmac-sha1 and des-cbc-crc )

I'm trying to audit kerberos passwords. The available formats are des3-hmac-sha1 and des-cbc-crc but I cannot find a possibility/a tool to crack them. For other hash-types I used John the Ripper, but ...
1
vote
2answers
98 views

Is a SHA-256 signature required on a CSR in order to generate a certificate with SHA-256 signature?

I've heard conflicting statements about this from certificate authorities and security groups and would like to confirm: Is a SHA-256 signature required on a CSR in order to generate a signed ...
4
votes
1answer
130 views

Using Nokia feature phones with new SHA256 Certificates

Our site needs to provide SSL authentication with a number of older devices. These devices (mostly old Nokia Feature Phones) have a limited number of root certificates and are only able to ...
0
votes
1answer
3k views

When and how will Internet Explorer refuse sha-1 certificates?

sha1 certificates are deprecated. The web browser Google Chrome shows a red security warning for the website https://sha1-2017.badssl.com/ (sha1 certificate expires in 2017). It shows neutral (neither ...
1
vote
2answers
80 views

Is this explanation about how SSL Certificate Signatures work correct?

I was reviewing some information about SSL certificates and came across an explanation I believe to be incorrect. The explanation is of how signatures and hashing algorithms work in the context of ...
42
votes
4answers
3k views

Is using bcrypt on existing SHA1 hashes good enough when switching password implementation?

I'm working on improving a CMS where the current implementation of storing password is just sha1(password). I explained to my boss that doing it that way is incredibly insecure, and told him that we ...
2
votes
1answer
166 views

Generating SHA-0

Unfortunately, I need to generate some SHA-0 hashes, I was using BouncyCastle and there's nothing in there to generating them. I know it's weak and not secure, but regardless, I have to be able to ...
4
votes
1answer
267 views

OpenSSL 0.9.6a PRNG algorithm weakness: How to exploit?

I saw an OpenSSL security advisory for Openssl 0.9.6a Recently a cryptographic flaw in OpenSSL's built-in pseudo-random number generator (PRNG) was pointed out to us by Markku-Juhani O. Saarinen <...
4
votes
3answers
172 views

Can a file have the same MD5SUM but different SHA-1 results from different tools?

I have one file. SHA-1 and MD5 have been generated long time back. I do not know which tool has been earlier. Recently I generated SHA-1 & MD5 for the same JAR. Surprisingly I found that MD5 is ...
2
votes
2answers
1k views

Is it possible to salt the SHA1 or SHA256 hash function of OpenSSL?

I would like to salt the hash function of OpenSSL external, so that I can assign a salt on my own. Is that possible or is the hash function of OpenSSL alsways internal "salted"?
3
votes
1answer
174 views

Challenge: How to find the secret key in homebrew MAC/keyed hash: sha1(key + cookie)?

I am trying to solve a security challenge on a website. Basically, the website computes sha1(key + cookie) to sign a cookie so that the user can't change it himself, and to accomplish the goal you ...
3
votes
1answer
2k views

Creating an TLS certificate using keytool with SHA-256

I want to create a TLS certificate for my personal tomcat8 webserver on a Debian ARM server. I've done this before, using the following command: /usr/bin/keytool -genkey -alias tomcat -keyalg RSA -...
1
vote
1answer
201 views

How to Build Pre-Master Secret [duplicate]

I'm implementing a TLS-like system, which uses ECDHE-RSA-AE-GCM-SHA, and I've faced two interrogations. At the end of the handshake ( and before the ChangeCipherSpec message), both the client and the ...
26
votes
6answers
3k views

Is sha1sum still secure for downloadable software packages signature?

We use sha1sum to calculate SHA-1 hash value of our packages. Clarification about the usage: We distribute some software packages, and we want users to be able to check that what they downloaded is ...
10
votes
2answers
2k views

Why should I choose SHA (such as SHa-512), instead of bcrypt or PBKDF2, for FIPS-compliance?

Due to regulation, my company needs to be FIPS-compliant. I was looking at the current list of FIPS-approved cryptographical methods and I notice that neither bcrypt or PBKDF2 are in this list. ...
0
votes
2answers
199 views

Why is Facebook planning to drop support for SHA-1 encrypted sites, when they themselves use a SHA-1 certificate?

I noticed this problem when I implemented the Facebook Like Button plugin on my website, and got this error in my browser console: Hmm, I'm assuming that Firefox is talking about the last request, ...
0
votes
1answer
105 views

Is it safe to use the SHA1 checksum of a password as a key for SHA-1?

I have an authentication system, where the passwords are stored with bcrypt hash (node passport module). My server generates a random key (128bytes) at startup. Whenever a user logs in, the server ...
3
votes
1answer
239 views

Getting a certificate warning for one email but not another

When I log into outlook.com using Chrome browser, I get a certificate warning for one account but not another. One says my connection is private, the other says it "may not be private". Here are the ...
2
votes
3answers
410 views

Hashing passwords in OpenLDAP

I've seen a few posts on the internet saying most people store user passwords in OpenLDAP using one of OpenLDAP's many, built-in hashing functions. But OpenLDAP itself recommends handing off password ...
1
vote
4answers
1k views

SHA-1 deprecation and self-signed certificates

I am confusing regarding SHA-1 deprecation. We use self-signed certificates signed with SHA1 and the expiration is after 1 January 2017. According to this blog: http://blogs.technet.com/b/pki/...