Hacker News new | ask | show | jobs
by danielweber 3400 days ago
If you were to somehow get two messages with the same SHA-3 hash, you could keep on appending the same data to both and they would keep the same SHA-3. But SHA-3 is explicitly not vulnerable to length extension attacks.
1 comments
fivesigma 3400 days ago
No they wouldn't, since its internal state is different than the output.

Same goes for SHA-224 and SHA-384.

link
danielweber 3400 days ago
Damn, right, you have to get them with the same internal state.
link