Mastodon Feed
soatok@furry.engineer ("Soatok Dreamseeker") wrote:
RE: https://furry.engineer/@soatok/116896318346322670
Oh, and this isn't even covering like... canonicalization attacks.
If you're encoding data in any way (this includes concatenating two or more input strings), you need your encoding scheme to be unambiguous and injective. Otherwise, attacks will occur.
See https://soatok.blog/2020/07/15/kerlissions-trivial-collisions-in-iotas-hash-function-kerl/