Hacker News new | ask | show | jobs
by brettproctor 1453 days ago
I figured it was unlikely google would make such a mistake, so I looked at the docs. They use public key cryptography to generate a private shared secret that is hashed alongside the message. This prevents the brute force hash attack.

https://developers.google.com/business-communications/verifi...

1 comments

Awesome! Thanks for looking this up, instead of just speculating.

Btw, in some sense this is exactly the same stuff you'd have to do to make committing to a single-bit work. Or encrypting a short message, in a way that's not easy to crack.