SHA2 is a family of cryptographic hash algorithms, including SHA256 and SHA512. These are the successor to the SHA1 algorithm.
Questions tagged [sha2]
43 questions
2
votes
1 answer
How difficult it is to solve a salt if knowing the original data and the hash output that uses the SHA-2 algorithm
I am reading the documentation for Kentico where it describes using hashes to validate query…
![](../../users/profiles/44992.webp)
Andrey
- 123
- 3
2
votes
2 answers
Does sending two different hashes of the same password reduce security?
I'm updating a login system. The password is sent to the server as SHA512(password + long_string). I want to switch this to something like SHA512(username + password) in the future.
By doing that I don't need to add "please login again" dialogs when…
![](../../users/profiles/37544.webp)
cmpxchg8b
- 123
- 3
2
votes
1 answer
Reversing a block hash of SHA-1 with known Plaintext?
Is it possible to reverse the hashing of a block in a Datastream fed to an SHA1 if the plaintext for that block is known? If it is not possible (which I assume) does it make attacks to retrieve the state easier?
An example what I'm trying to figure…
![](../../users/profiles/32609.webp)
Patrick Huy
- 123
- 4
2
votes
0 answers
Add additional rounds on existing SHA-512 salted hashes without knowing clear text password?
Assuming you have a salted SHA-512 password hash with 5000 rounds. For example:
{CRYPT}$6$rounds=5000$6835c5dcf0bb7310$hVod/jy7uONMSa.FVpLHb/2OrWpAj3lB/.RWdvgd3YaQAnzN3rorGhaziswwGsHfOWZYkLwXhHKnCy5By2CKr0
Could one add more rounds (e.g. another…
![](../../users/profiles/211694.webp)
LuHa
- 31
- 3
2
votes
3 answers
Are Salt strings stored by application?
1) As storing passwords in plain text in databases are not secure and so is not a good practice.
password stored in db = "abcde" (plain text)
2) To avoid this, passwords are stored after being hashed using some reliable hashing techniques like…
![](../../users/profiles/154974.webp)
joven
- 151
- 1
2
votes
0 answers
SHA 1 Interemediate Signer for a SHA2 Personal Certificate
I came across a certificate that has a signer that is SHA1 but it is a SHA2 certificate. Is this actually allowed or is did the CA screw up ? Would it work with a TLS 1.2 negotiation?
![](../../users/profiles/141510.webp)
Thomas Cosenza
- 21
- 1
2
votes
3 answers
Rounds in a hashing function
First of all, Hello! I'm new to the site, don't know any english equivalent to "yoroshiku".
So, I was reading the SHA-512crypt generator documentation and found the part:
The default number of rounds for both algorithms is 5,000. To ensure
…
![](../../users/profiles/137292.webp)
WOkzinhan
- 21
- 1
- 2
2
votes
2 answers
Is a SHA-256 signature required on a CSR in order to generate a certificate with SHA-256 signature?
I've heard conflicting statements about this from certificate authorities and security groups and would like to confirm: Is a SHA-256 signature required on a CSR in order to generate a signed certificate with SHA-256 signature?
I thought it wasn't…
![](../../users/profiles/2075.webp)
Mike B
- 3,336
- 4
- 29
- 39
1
vote
1 answer
Issue regarding installation of SHA256 scertificate
Can anyone help me with the installation of SHA256 certificate? I have generated the certificate perfectly but there seems to be an error below:
Kindly let me know why am getting the exclamation mark in the yellow triangular box at the Key Usage…
![](../../users/profiles/79742.webp)
gowri kaushik
- 13
- 2
1
vote
2 answers
iOS, Android, and OS X SHA-2 support (in the context of SSL/TLS certificates)
As there is currently a move away from SHA-1 being used as part of TLS, we're examining moving our SSL certificates, used to protected traffic in transit to/from our webservers, to use SHA-2.
However, I'm having trouble finding information on client…
![](../../users/profiles/32308.webp)
Josh
- 131
- 1
- 5
1
vote
0 answers
Recomended hash algorithm
Possible Duplicate:
How to securely hash passwords?
Do any security experts recommend bcrypt for password storage?
What would you choose between:
PBKDF2 SHA256 (270,000 iterations)
bcrypt (12, 13 or 14 cost: 1-2 seconds)
scrypt: I don't know if…
![](../../users/profiles/11892.webp)
Surfer on the fall
- 787
- 3
- 8
- 17
1
vote
1 answer
How many possibilities can today's computers check (per second) in a SHA512 hash of a 50-byte-long random entry?
The problem I want to avoid is "brute force" attacks against a database. So if I add a 50-byte-long cryptographically random salt to my information (which I don't need to retrieve, just its hash) - is it secure enough?
I know the answer is inexact -…
![](../../users/profiles/12012.webp)
ispiro
- 773
- 1
- 7
- 18
1
vote
1 answer
What is the application of SHA384withRSAEncryption?
I am trying to understand the application of SHA384withRSAEncryption. SHA-384 is a message digest algorithm and RSA is used for public key cryptography (secure communication).
RSA involves a public private key pair, so there are 2 ends of…
![](../../users/profiles/10217.webp)
Neon Flash
- 929
- 2
- 11
- 17
1
vote
0 answers
How Secure Would Client Side Sha-512 Be In JavaScript
I've created an Capture The Flag challenge for me and a few of my mates, and for the final challenge, you're goal is to log in as admin to a site. Now the site doesn't use any server side languages (since it's purposely insecure and I'd rather not…
![](../../users/profiles/148481.webp)
The Gamer King
- 37
- 5
1
vote
1 answer
Extra PBKDF2 characters in SHA-512 output
I was using hash_pbkdf2 earlier today when I noticed something strange.
The normal way to generate a hash is to output the entire string like the code below which outputs a 128 character string (128 chars, 4 bit each, 512bit total):
echo…
![](../../users/profiles/91148.webp)
Aedazan
- 134
- 8