Tag
domain-separation
- Jul 2, 2026 Length Extension and Prefix-Free Message Encoding Why an iterated hash can be continued from its own digest, how the attack reconstructs unknown input from output alone, and which encodings close the hole. cryptography
- Mar 30, 2026 Domain Separation in Merkle Tree Hashing How a leaf node and an internal node can hash to the same value, why the standard repair costs one bit of digest, and which schemes still get the distinction wrong. cryptography
- Jul 7, 2025 Parallel Tree Hashing and the BLAKE3 Design How chunk trees, parent nodes, and a stack of subtree roots convert a sequential hash into a parallel one, and what the tree structure costs in digest size and complexity. cryptography
- Apr 29, 2025 Domain Separation and Labelled Key Derivation Why one master secret must never produce two interchangeable keys, how labels are encoded into a KDF, and which label collisions still cause cross-protocol failures. cryptography