Mastodon Feed: Post

soatok@furry.engineer ("Soatok Dreamseeker") wrote:

If anyone is confused about why this is funny:

Imagine you have two password fields on two different forms

Form A uses a password hashing function (e.g., Argon2) on your password and stores a hash.

Form B is almost the same, but hashes the string "gay" followed by your password.

If you swap hashes, you only need to prepend "gay" to your usual password for it to succeed.

Okay, so what?

Now imagine you're building a protocol that uses hash functions for different purposes and you used H(m) and H("gay" + m) in two different places, and felt confident that swapping hashes would always fail.

Well.

Bad news lol