Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 89876

Secure Hash Algorithm is a family of cryptographic hash functions published by NIST. This includes SHA-1, and the SHA-2 and SHA-3 families of functions. SHA-1 is deprecated for all usages.

1 vote
Accepted

Recover SHA1-encoded email addresses

Finding salt is relatively easy: put the known email address as the salt for the hashes into hashcat. However, it probably won't handle non ASCII salt (e.g. random binary data). Once you've got the …
Matthew's user avatar
  • 27.4k
47 votes
Accepted

What are the implications of a SHA-1 collision being found?

Similarly, it would be possible to generate multiple ISO images which have the same SHA-1 hash. … Experts have been advising moving from SHA-1 for a while now, and this advice still stands. …
Matthew's user avatar
  • 27.4k
4 votes

Does the existence of a SHA-1 collision mean any passwords hashed with it are insecure?

However, any passwords which are hashed with SHA-1 should be considered as insecurely stored anyway - modern hardware means that it is possible to try hundreds of thousands of potential passwords, even …
Matthew's user avatar
  • 27.4k
3 votes
Accepted

What would stop me from cracking a certain bcrypt hash?

Yes, it's possible. Don't need the rainbow table - that would only benefit you if you had multiple passwords using the same salt - since you can directly test the passwords. Could take a while though …
Matthew's user avatar
  • 27.4k
1 vote

Where to find the exact specification for sha512 "values"?

In the case of SHA-512, it's 512 binary digits, or 64 bytes, or 128 hexadecimal characters, or an 88 character long base64 encoded string. …
Matthew's user avatar
  • 27.4k
15 votes

Should I trust a website which uses a SHA-1 HTTPS certificate?

The certificate itself is no weaker than any other - in fact, it is technically possible for a single certificate to be signed by both SHA-1 and SHA-256 methods. … Also, see https://konklone.com/post/why-google-is-hurrying-the-web-to-kill-sha-1 for some more details on this. …
Matthew's user avatar
  • 27.4k
10 votes
Accepted

Will Google block HMAC-SHA1 along with SHA1 signed certificates?

Due to the mathematics of how HMACs work, a weakness in the hash algorithm doesn't automatically mean that a HMAC based on it is also weak. This might seem counter-intuitive, but comes down to the fac …
Matthew's user avatar
  • 27.4k
3 votes

Using Nokia feature phones with new SHA256 Certificates

The push to eliminate SHA-1 has been extensive, and, by the usual standards of these things, remarkably quick. … is better to have completely deprecated SHA-1 signatures before the technology reaches the dangerous point. …
Matthew's user avatar
  • 27.4k