Displaying 1 result from an estimated 1 matches for "402337".
Did you mean:
40237
2000 May 20
2
hmac format?
I was looking at the the way that ssh calculates an hmac, and I
noticed that the ordering is a little strange - it does hash(key+message).
Shouldn't this rather be hash(message+key)? In the former situation, it
could be possible for an attacker to append something to the end of the
data being sent. The attacker would be able to calculate a valid hmac
without knowing the key. For instance,