2 TaggedHash

zooko edited this page 2007-05-04 14:18:52 +00:00

Each place a hash function is used within Tahoe, the data to be hashed is first prepended with a distinct "tag", one per purpose.

These tags are encoded as a netstring, to insure that they cannot be confused with the data being hashed. For example, the VerifierId is computed as the SHA-256 hash of the following string:

    "23:allmydata_verifierid_v1," + DATA

This technique is especially important to distinguish the leaf nodes from the internal nodes in a MerkleHashTree, because otherwise an attacker can trivially construct leaf data that results in the same root hash as a previously constructed tree.