Nate Lawson personal blog

Nate Lawson Breaks Google Keyczar's HMAC Crypto Signatures

I recently found a security flaw in the Google Keyczar crypto library. The impact was that an attacker could forge signatures for data that was “signed” with the SHA-1 HMAC algorithm (t…
Points
62
HN comments
24
Submissions
1
Cited by
5 commenters

Security & PrivacySoftware Engineering2009

On Hacker News

SubmittedTitle on HNPointsComments
May 29, 2009Nate Lawson Breaks Google Keyczar's HMAC Crypto Signatures by tptacek6224

Cited in comments

Linked from 7 Hacker News comments by 5 different people, from Jun 2009 to Jun 2015.

Most recent:

Search every comment that links here →

More from Nate Lawson

All 5 posts →

Related posts from the same era