Agentic data science with the Data Agent Kit
cloud.google.com·7h ago
Security
Trail of Bits Blog·10d ago·5 min read
SequenceHash: multihashing for the rest of us
TL;DR
Trail of Bits has introduced SequenceHash and SequenceMAC, two new hash constructions that simplify secure multihashing for developers using various cryptographic hash functions. These tools aim to prevent attacks stemming from ambiguous input encodings.
✦ Why It Matters
Start using SequenceHash and SequenceMAC today to enhance the security of your cryptographic applications.
Key Takeaways
- Implement SequenceHash for secure multihashing with various hash functions.
- Use SequenceMAC to prevent length-extension attacks in your protocols.
- Incorporate customization strings to bind hashes to specific contexts.
- Leverage available implementations in Rust, Go, and Python for quick integration.
How It Works
SequenceHash uses a simplified length-suffix encoding to ensure unambiguous input encoding, preventing any overlap between hashed values. It employs a double-hash construction to mitigate length-extension attacks, while SequenceMAC adds a keyed variant that incorporates key lengths into the hash, addressing key pseudocollision issues.