Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Secure Hash Algorithm is a family of cryptographic hash functions published by NIST. This includes SHA-1, and the SHA-2 and SHA-3 families of functions. SHA-1 is deprecated for all usages.
47
votes
Accepted
What are the implications of a SHA-1 collision being found?
Similarly, it would be possible to generate multiple ISO images which have the same SHA-1 hash. … Experts have been advising moving from SHA-1 for a while now, and this advice still stands. …
15
votes
Should I trust a website which uses a SHA-1 HTTPS certificate?
The certificate itself is no weaker than any other - in fact, it is technically possible for a single certificate to be signed by both SHA-1 and SHA-256 methods. … Also, see https://konklone.com/post/why-google-is-hurrying-the-web-to-kill-sha-1 for some more details on this. …
10
votes
Accepted
Will Google block HMAC-SHA1 along with SHA1 signed certificates?
Due to the mathematics of how HMACs work, a weakness in the hash algorithm doesn't automatically mean that a HMAC based on it is also weak. This might seem counter-intuitive, but comes down to the fac …
4
votes
Does the existence of a SHA-1 collision mean any passwords hashed with it are insecure?
However, any passwords which are hashed with SHA-1 should be considered as insecurely stored anyway - modern hardware means that it is possible to try hundreds of thousands of potential passwords, even …
3
votes
Using Nokia feature phones with new SHA256 Certificates
The push to eliminate SHA-1 has been extensive, and, by the usual standards of these things, remarkably quick. … is better to have completely deprecated SHA-1 signatures before the technology reaches the dangerous point. …
3
votes
Accepted
What would stop me from cracking a certain bcrypt hash?
Yes, it's possible. Don't need the rainbow table - that would only benefit you if you had multiple passwords using the same salt - since you can directly test the passwords.
Could take a while though …
1
vote
Where to find the exact specification for sha512 "values"?
In the case of SHA-512, it's 512 binary digits, or 64 bytes, or 128 hexadecimal characters, or an 88 character long base64 encoded string. …
1
vote
Accepted
Recover SHA1-encoded email addresses
Finding salt is relatively easy: put the known email address as the salt for the hashes into hashcat. However, it probably won't handle non ASCII salt (e.g. random binary data).
Once you've got the …