Skip to content
“YOLO” is not a valid hash construction
blog.trailofbits.com | blog | #secure-coding | #cryptography | #mac | #trail-of-bits | #hash-functions | #pbkdf2 | #tuplehash
Summary
Trail of Bits explains why ad-hoc 'YOLO' hash constructions fail—ambiguous encoding, MAC misuse, weak KDFs—and recommends standards like TupleHash, HMAC, and PBKDF2 instead.
- Published
- Collected