“YOLO” is not a valid hash construction

Published

2024-08-21 13:00

Collected

2026-07-03 03:43

---
id: 1466
title: "“YOLO” is not a valid hash construction"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/08/21/yolo-is-not-a-valid-hash-construction/"
published_at: "2024-08-21 13:00"
tags: ["secure-coding", "cryptography", "mac", "trail-of-bits", "hash-functions", "pbkdf2", "tuplehash"]
phying_url: "https://phying.com/item/1466"
lang: en
---

# “YOLO” is not a valid hash construction

## Summary

Trail of Bits explains why ad-hoc 'YOLO' hash constructions fail—ambiguous encoding, MAC misuse, weak KDFs—and recommends standards like TupleHash, HMAC, and PBKDF2 instead.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2024-08-21 13:00
- **Original:** https://blog.trailofbits.com/2024/08/21/yolo-is-not-a-valid-hash-construction/
- **Phying News:** https://phying.com/item/1466