Replying to Avatar moegrammer

Heyo, great question. My rationale behind double hashing the recovery key commitment was to prevent against length extension attacks.

I’m not a cryptography expert though so there’s a possibility that double hashing might just be unnecessary complexity. Would be awesome to know for certain
Avatar
Max 2y ago

I'm out of my depth here, but doesn't even a single hash hide the length of the input?

Summoning a wild #[5] to clear things up 🖤

Reply to this note

Please Login to reply.

Discussion

Avatar
moegrammer 2y ago

In the meanwhile, here’s ChadGPT’s take:

Avatar
waxwing 2y ago

Yes but as I said, this is fixed length data - a secp256k1 pubkey. LEA applies to the scenario where you're trying to check the authenticity of an arbitrary length string that is authenticated with a secret. I don't think it applies here, nor in sighashing, nor in standard hash commitments.