logoalt Hacker News

iforgotpassword12/09/20240 repliesview on HN

Truncated hash functions are not vulnerable to length-extension attacks. But you usually take SHA512 and truncate to 256 bits. Anything shorter than this isn't really considered safe these days.