Knowledge check
10 questions testing what you just read — no login, no tracking, just immediate feedback.
What causes a length-extension attack against SHA-2?
Why does HMAC resist length-extension attacks that naive H(key‖message) doesn't?
Why is SHA-256 described as offering ~128-bit, not 256-bit, collision resistance?
What are the three core properties of a cryptographic hash function?
Which older hash algorithms are cryptographically broken for collision resistance and shouldn't be used for security purposes today?
What does the avalanche effect demonstrated by SHA-256("hello") vs. SHA-256("hellp") show?
What does the Merkle-Damgård construction do with a long message before hashing it?
What structural feature makes SHA-3 naturally immune to length-extension attacks, unlike SHA-2?
In the "hash-then-sign" pattern used by RSA and ECDSA signatures, what does the signer actually sign?
In HMAC's formula H((K′⊕opad) ‖ H((K′⊕ipad) ‖ m)), what are K′, opad, and ipad?