cryptoPromedium
Хмак! Будь здоров!
duckerz
Task: HMAC verification service with custom insecure_compare function that compresses 32-byte digest to 4 bytes via block_xor. Solution: Use oracle to get block_xor of target message, craft fake MAC with same compressed value by placing target bytes with zeros.
$ ls tags/ techniques/
hash_compression_attackcollision_crafting
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]UUIDY— duckerz
- [crypto][Pro]Двойной хэш (Double Hash)— hackerlab
- [crypto][Pro]Гран-при (Grand Prix)— duckerz
- [misc][Pro]Иерархия (Hierarchy)— duckerz
- [web][Pro]143 - Личный блог— duckerz