Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #9

Broken MD2 hash algorithm found in Filen encrypted cloud storage

Original: When did you last see MD2 in prod? I found it in Filen, a "zero-knowledge" end-to-end encrypted cloud storage: https://

A security researcher reports finding the MD2 hash algorithm, which has been considered broken since the 1990s, still in use in Filen, a cloud storage service marketed as zero-knowledge end-to-end encrypted. In a blog post, the researcher questions why a deprecated cryptographic primitive is running in production, and raises broader doubts about whether browser-based cryptography can offer meaningful protection for encrypted storage services.

Why now: The discovery of a decades-broken hash algorithm in a privacy-focused service challenges its security claims, drawing attention from the cryptography community.

FilenMD2Pascscha

Open on mastodon →

Evidence

• When did you last see MD2 in prod? I found it in Filen, a "zero-knowledge" end-to-end encrypted cloud storage: https:// schaerli.org/7/ Besides hashes broken since the last millennium, my post questions whether crypto in the browser makes sense at all, and which protections it… · pascscha

API: https://socialmediatrends-api.osmike.com/v1/trends/4736498