Secure Hash Algorithm is a family of cryptographic hash functions published by NIST.

learn more… | top users | synonyms (1)

10
votes
2answers
1k views

Why should I choose SHA (such as SHa-512), instead of bcrypt or PBKDF2, for FIPS-compliance?

Due to regulation, my company needs to be FIPS-compliant. I was looking at the current list of FIPS-approved cryptographical methods and I notice that neither bcrypt or PBKDF2 are in this list. ...
0
votes
2answers
77 views

Why is Facebook planning to drop support for SHA-1 encrypted sites, when they themselves use a SHA-1 certificate?

I noticed this problem when I implemented the Facebook Like Button plugin on my website, and got this error in my browser console: Hmm, I'm assuming that Firefox is talking about the last request, ...
1
vote
1answer
58 views

Is it safe to use the SHA1 checksum of a password as a key for SHA-1?

I have an authentication system, where the passwords are stored with bcrypt hash (node passport module). My server generates a random key (128bytes) at startup. Whenever a user logs in, the server ...
0
votes
1answer
36 views

Getting a certificate warning for one email but not another

When I log into outlook.com using Chrome browser, I get a certificate warning for one account but not another. One says my connection is private, the other says it "may not be private". Here are the ...
1
vote
1answer
70 views

Hashing passwords in OpenLDAP

I've seen a few posts on the internet saying most people store user passwords in OpenLDAP using one of OpenLDAP's many, built-in hashing functions. But OpenLDAP itself recommends handing off password ...
1
vote
3answers
137 views

SHA-1 deprecation and self-signed certificates

I am confusing regarding SHA-1 deprecation. We use self-signed certificates signed with SHA1 and the expiration is after 1 January 2017. According to this blog: ...
-1
votes
1answer
155 views

Does SHA-512 become suitable to store a password if we use salting and iteration with it?

Today I have read this discussion about SHA-256 and SHA-512 and that we should not use any of them to store a password securely. And I have read here that instead we can use the PBKDF2 hashing ...
1
vote
2answers
497 views

which hashing algorithm is better to use to store a password, sha256 or sha512? [duplicate]

which hashing algorithm is better to use to store a password, sha256 or sha512? I know that sha512 is more secure than sha256 but I was wondering if it has some disadvantages or it is completely ...
1
vote
1answer
69 views

Secure Software Architecture

I am designing a software architecture and i need some suggestion and clarification on few issues. This will be a server side RESTfull API for accessing data and multiple mobile/desktop client to ...
1
vote
1answer
60 views

The use of SHA-1 in a cyber forensic

Let's say a hard disk (A) is retrieved from a system to make a clone of it on hard disk (B) and use this clone for a forensic investigation. Is SHA-1 secure enough to make sure that no other ...
2
votes
2answers
174 views

Should I update my SHA-1 certificates? If so, how?

Q: Should I update my SHA-1 certificates? If so, how? Recently I noticed the "https:" has a red strike-through and warning in Chrome, but only on certain websites. Apparently this has been ...
0
votes
2answers
179 views

Are the Microsoft Windows images found on the internet safe?

Microsoft has stopped offering the Windows images for download. It is now only possible to get the image if one has a key of a retail version of the corresponding OS. The question is now, whether the ...
2
votes
1answer
49 views

Issue regarding installation of SHA256 scertificate

Can anyone help me with the installation of SHA256 certificate? I have generated the certificate perfectly but there seems to be an error below: Kindly let me know why am getting the exclamation ...
1
vote
1answer
184 views

Browser response to SHA1 signed cert

Generated a IIS server certificate using my domain certificate authority (presumed to be an intermediate to the 'secret' root CA) via the Server Certificates -> Create Domain Certificate 'wizard'. ...
2
votes
2answers
91 views

Why is it fine for Certificates above the end-entity certificate to be SHA1 based?

I have heard about the phasing out of Sha1 based certificates for end entity use, and the steps that are outlined for chrome to display progressively more aggressive warnings for Sha1 certs not ...
62
votes
3answers
7k views

Why is Google still using a sha1 certificate on its own site when they are phasing them out in Chrome?

Firefox dev tools shows that https://www.google.com is using a certificate signed with SHA1. Why is Google doing this when they are phasing out the certificate themselves? Shouldn't this only hurt ...
4
votes
2answers
996 views

Obsolete cryptography (SHA1) warning although certificate uses SHA256

I ordered a certificate with SHA256 from Comodo and was wondering why Chrome shows this message: Your connection is encrypted with obsolete cryptography. The connection is encrypted using ...
0
votes
0answers
40 views

SHA-2 migration considerations

due to SHA-1 being in the path of deprecation, i will be migrating my SSL certs to SHA-2. Besides creating CSR using SHA-2 for signing, what other considerations should I take note of? I believe one ...
4
votes
1answer
123 views

Why did browsers deprecate 1024-bit RSA, but retain SHA-1?

I was reading Mozilla's security blog Phasing out Certificates with 1024-bit RSA Keys. Effectively, some browsers are deprecating 1024-bit RSA for CAs and Subordinate CAs because the certificate must ...
1
vote
1answer
86 views

Is it worth it to implement both SHA2 and SHA3 at the same time?

I'm creating a password storage system for a web server I'm building for fun. Would it be more secure for me to use both SHA2 and SHA3 for hashing, and then store them in a database? If I use both ...
8
votes
1answer
9k views

Firebug reports SHA-1 certificate error

For the script at the bottom of this post, Firebug reports the following error: This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that ...
6
votes
4answers
1k views

Store password using sha1 [duplicate]

I've been using the sha1() function to hash password before inserting it into my database. But I have this procedure so that it just won't be the password to be hashed. My page would register a user ...
33
votes
2answers
5k views

What is the relationship between “SHA-2” and “SHA-256”

I'm confused on the difference between SHA-2 and SHA-256 and often hear them used interchangeably (which seems really wrong). I think SHA-2 a "family" of hash algorithms and SHA-256 a specific ...
1
vote
0answers
103 views

how many sha1 hashes per time on current hardware [closed]

How many sha1 hashes per second can current hardware (say a 500$ gpu) compute, when the input is 256 byte long? (or any other length). The question behind is how long (or how costly) is it to mount a ...
3
votes
0answers
109 views

How does SHA3 (Keccak & SHAKE) compare to SHA2? Should I use non-SHAKE parameters?

Keccak is the winner of the SHA3 competition. Since Keccak is highly customizable (presumably for security/memory/time/speed tradeoffs) there does seem to be some controversy around how Keccak ...
2
votes
1answer
123 views

Securely storing passwords using PHP5

Starting note: After going through some articles and answers posted on SO related to storing secured passwords I'm still not sure whether my way of thinking is applicable to todays reality. I'm ...
3
votes
2answers
142 views

Is there any reason for using private key 2 times when creating security hash?

One of the payment solutions for the websites provides the following way of creating security hash for payment link: hash = sha1(private_key + payment_params_json + private_key); Is there any ...
0
votes
2answers
141 views

Is my hashing function good enough

Is there an obvious flaw with this hashing function (written in PHP)? function hash($password) { sleep(1); // Make hashing slow $hash = ""; $iterations = strlen($password); for ( $i = 0; $i ...
-1
votes
1answer
84 views

Disastrous aftereffects of a hashing attack

I am writing about hashing functions for my thesis. I want to know whether there were disastrous aftereffects of a successful hashing attack in history and what kind of hashing attack was used. ...
1
vote
2answers
95 views

Is it known to what message size are standard hash functions injective?

This simple Python script verifies that all messages of length 1 have different SHA-1 hashes: import hashlib s = set() for i in range(256): s.add(hashlib.sha1(chr(i)).hexdigest()) print len(s) ...
1
vote
1answer
88 views

What is the risk of using SHA1 in PGP email signatures?

SHA-1 is being phased out by a lot of major companies due to vulnerabilities. For example Chrome no longer considers it safe for public web PKI. Is it insecure to use SHA-1 for PGP email signatures?
2
votes
0answers
34 views

In DNSSec, are Delegation Signer Records always SHA-1?

I'm creating a RSA/SHA-512 Zone Signing Key and Key Signing Key at Dynect Managed DNS (corporate offering) The Delegation Signer Record that was created is SHA1. Should I be concerned about this?
5
votes
2answers
257 views

How is a hash's algorithm detected based on the hash?

I was reading an Ars Technica article this morning and came across the following towards the end (emphasis mine): Equation Group included six other hashes in different exploits that remain unknown ...
2
votes
1answer
143 views

Truncating hash output for a unique ID

This seems like a common question, but my knowledge on hashing is very limited, so I'm looking for a more ELI5-type answer. I would appreciate if someone could help me with my questions Some ...
0
votes
1answer
99 views

Signature scheme using RSA and SHA512

What do you think about this signature scheme using RSA with 4096 bit keys? Being R pseudorandom padding, fixed length (4096 - 512 bits): RSApriv(R || SHA512(M)) I know that it's not as secure as ...
1
vote
2answers
125 views

About SHA1 in default Disk Encryption in Linux

Link to the Thread: Recommended options for LUKS (cryptsetup) I wonder what's the exact difference between SHA1 and SHA512. I know that SHA512 has a longer key but I've read that it doesn't matter ...
1
vote
2answers
157 views

HMAC and non-repudiation

This was a question on an exam: Two persons are using a one way communication channel and the HMAC functionality (concretely HMAC-SHA1). Choose the correct statement below: 1) We can prove who the ...
5
votes
2answers
3k views

Security of Linux Full Disk Encryption (Ubuntu / Mint) -insecure?

I'm wondering, why is Ubuntu and Mint using SHA1 for Full Disk Encryption? I heard several times that SHA1 shouldn't be used anymore because it is weak and it could be cracked. Could you guys ...
11
votes
1answer
688 views

Torrent “bad seed” attack by Sony, how does it work?

Sony recently saw a large amount of data stolen. In order to prevent the stolen data from being spread using torrents, they are doing what was called a bad seed attack. What is this attack? Is this a ...
43
votes
3answers
4k views

Is Git crowdsourcing cryptographic attacks?

A strong cryptographic hash makes collisions unlikely. Many cryptographic protocols build on that fact. But Git is using SHA-1 hashes as object identifiers. So there are a lot of already computed ...
0
votes
2answers
158 views

SHA1 - S/MIME and CRL validity after deprecation?

In an internal PKI using SHA1 for hashing, will S/MIME signature and CRL/ARL signature be considered invalid in the next few years (SHA1 Deprecation) ? End certificates can be revoked, CA ...
2
votes
0answers
115 views

Is this PHP TOTP (time based one time password) idea sound?

Disclaimer: I am not very familiar with safety techniques in general. The problem: Quickly create lots of small files in server from a bash script. I used to use scp (secure copy) in order to create ...
1
vote
2answers
1k views

nginx recommended ssl_ciphers

I am looking for some advice on setting the ciphers for nginx with SSL. What would you recommend for a good compromise between security and compatiblity at the moment? I have made some research but ...
7
votes
1answer
715 views

Is there a method to get plain-text from cipher-text in HMAC SHA-1, given that the key is known?

This is technically not even an attack. We have all the resources at hand, except for the original plain-text. We have the cipher-text (to be converted back to plain-text), as well as the key. The ...
1
vote
1answer
337 views

How will SHA1 deprecation affect SHA1 roots in OS/Browser trust stores.

I understand the SHA1 deprecation policy applies to CA's issuing SHA2 end-entity certs and intermediates starting Jan 2017 but how will this policy affect the actual root certificates in OS/Browser ...
0
votes
2answers
117 views

Should I use HMAC in this situation

I need to store a big message encrypted on a server. What I am about to do is: Encrypt the message with a AES key; (Authentication) Hash the message with SHA512 and encrypt the hash with RSA priv ...
0
votes
1answer
236 views

Why are CA's now signing root certs with SHA2?

I see that CA's are now giving the option of having the root CA cert signed with SHA2. I have been told that the hashing function in a root has no security value, and is irrelevant as far as a ...
2
votes
3answers
198 views

GPG keys & SHA-1

I've heard that SHA-1 hashing is becoming less secure, and that most GPG keys are secured with SHA-1. Is there a way to determined if SHA-1 is in my GPG key, and what to do if this is the case?
14
votes
2answers
982 views

How safe are signed git tags? Only as safe as SHA-1 or somehow safer?

How safe are signed git tags? Especially because git uses SHA-1. There is contradictory information around. So if one verifies a git tag (git tag -v tagname), then checksouts the tag, and checks that ...
0
votes
2answers
235 views

What does 2^77.1 calls presented in a SHA1 attack mean?

Regarding the SHA 1 deprecation, I found this information here: http://blogs.technet.com/b/srd/archive/2013/11/12/security-advisory-2880823-recommendation-to-discontinue-use-of-sha-1.aspx I know ...