search

movementlabsxyz / movement

The Movement Network is a Move-based L2 on Ethereum.
Apache License 2.0
50 stars 48 forks source link

PAR-1 Use a Higher Security Level Hash Function #323

Closed SA124 closed 2 weeks ago

SA124 commented 1 month ago

Severity: Informational Status: Pending Auditor: Movebit Topic:Suzuka-only custom components

PAR-1 Use a Higher Security Level Hash Function Severity: Informational Discovery Methods: Status: Pending Code Location: networks/suzuka/suzuka-full-node/src/partial.rs#199-202 Descriptions: It is recommended to use a higher security level hash function (eg.sha3)The Sha256 algorithm is susceptible to hash length expansion attacks and will require urgent upgrades in the future if security issues arise

Screenshot 2024-08-08 at 12 41 21 PM

Suggestion: It is recommended to use a higher security level hash function (eg.sha3)

l-monninger commented 3 weeks ago

We have changed to blake3 since this was reviewed.