Edge Rewrite
// HTMLRewriter · presentation

This page was redesigned at the edge.

Cloudflare fetched the original article and streamed it through HTMLRewriter to apply an entirely new visual system without rebuilding the source page.

// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
CMH
Connection
HTTP/2
Language
Not provided

Ray ID: a225208eb8ba97b7

Jump to content

Talk:Length extension attack

Page contents not supported in other languages.
Add topic
From Wikipedia, the free encyclopedia

Should we make example clearer?

[edit]

The example stated here does not allow readers to re-create the attack. Should we add related information (like which hashing algorithm is used for the example, why do we add the padding like that, etc.)? Long Doan (talk) 19:12, 4 December 2022 (UTC)Reply

IMO, I think a clearer example would improve this article. I'd suggest keeping both - one as a pseudocode example and a second as a concrete example (e.g., like with the example of the Flickr attack) Maslen (talk) 19:39, 4 December 2022 (UTC)Reply


The meaning of || and linking symbols instead of names

[edit]

I was reading another wikipedia page and when it introduces the notation (message1 || message2) it follows this with "where ∥ denotes concatenation". This was very clear. On this page however it uses as a reference. I found this confusing and it took a lot of squinting to see that the || symbol was actually a link to another page. The smaller the linked reference the harder it is to see that it's blue.

Concatenation is fundamental to understanding a length extension attack, so I think its very important to not be subtle with this point. If the reader doesn't catch what the || symbol means they're in trouble for understanding the rest of the page.

In math you might be used to X⌢Y, or coming from programming you might be used to || meaning "or". So, I think it helps to be very explicit during the first mention of this.  Preceding unsigned comment added by 24.17.152.103 (talk) 20:21, 4 November 2023 (UTC)Reply