Other nomination
Hash Information Disclosure Via Collisions - The Hard Way
A thought experiment on using precomputed hash collisions as a fingerprinting oracle. Registering a password and then logging in with a known colliding string reveals which hashing algorithm and salting scheme a site uses. The same trick extends to password blacklist evasion and to databases whose primary key is a hash of known data.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.