Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The collision attack on SHA-1 should not threaten HMAC-SHA1. Even HMAC-MD5 hasn't been successfully attacked yet, AFAIK.

Poly1305 is arguably less misuse-resistant, since it requires a nonce.



That's typical of AEAD modes in general, though. GCM also requires a nonce.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: