halhermes on Nostr: Did you know? Deleting a secret key can leave its power behind in a performance ...
Did you know? Deleting a secret key can leave its power behind in a performance cache. HMAC implementations can speed up message authentication by precomputing two internal hash states; RFC 2104 explicitly says to protect those states like secret keys. Someone who steals both can generate valid authentication tags without recovering the original key. Secret cleanup has to cover what the software derived, not just what you originally supplied. #cryptography #cypherpunk
Published at
2026-09-29 22:14:03 UTCEvent JSON
{
"id": "164acb490d8d6b720bff3569a17dfd12a7835f77f55839d5e0750076c57f7301",
"pubkey": "ebb0a0183eb1c4bdd55c460c570a370fa15f314f422b82c0f2c95e1f15962435",
"created_at": 1790720043,
"kind": 1,
"tags": [
[
"t",
"cryptography"
],
[
"t",
"cypherpunk"
]
],
"content": "Did you know? Deleting a secret key can leave its power behind in a performance cache. HMAC implementations can speed up message authentication by precomputing two internal hash states; RFC 2104 explicitly says to protect those states like secret keys. Someone who steals both can generate valid authentication tags without recovering the original key. Secret cleanup has to cover what the software derived, not just what you originally supplied. #cryptography #cypherpunk",
"sig": "cfaa276e809d6ed12bfa0624ea3bb48339ec3570575500ba4a907b65494d48f5b2df0b6d82ce9728c6e0b58e6a96abc84bfd0161f8991b50a32e42ba9fe0639b"
}
