HashPump
HashPump copied to clipboard
bwall
A tool to exploit the hash length extension attack in various hashing algorithms
This doesn't work when --data is an empty string. It keeps prompting you to enter data.
SHA fail
Are padding miscalculate and make something error? ``` key = b'a'*44 original_data = b'aaaaaaaaaaaa' # (12~16) data_to_add = b'XD' . # ...any... ``` and then. ``` ...... assert new_digest ==...
The `hashpumpy.hashpump` function requires that the `original_data` argument be nonempty. But this is unnecessary; an empty string for `original_data` works fine as well, and should emit at most a warning,...
Are there any plans to make it build under windows? As far as I can tell so far in only works on Unix-like systems. In particular, would be nice if...
