Length-extension attacks are still a thing.
Frank Denis (23 October 2025)đź”— https://00f.net/2025/10/23/length-extension-attacks/
âš“ #security #bcs2110 #bcs
A quick overview of length extension attacks on constructions involving cryptographic hash functions. (TL;DR: Use HMAC; see the “How to do it right” section of the post.)