Hacker News Reader

I’m always confused when people slam sha on hmac. Is there a realtime sha back door I’m missing? Even sha 1 takes days/months to break.

View on HN

I don't understand what you're asking here. Don't use HMAC as a password hash? HMAC keys should be a long string of uncorrelated bits, not ASCII strings?

Reply on news.ycombinator.com