This is a video version of my blog post, Length Extension Attack. In it, I talk through the theory of length extension attacks and demonstrate an SHA-1 length extension attack against an (imaginary) website.
The video can also be found on:
Length Extension Attack Demonstration (Video)
This post is also available as an article. So if you'd rather read a conventional blog post of this content, you can!
Thank you so much for making this video! This is one of the best explanations of a hash length extension attack I’ve seen and I’ve been pouring through tons of videos and blog posts trying to wrap my head around it. Will recommend to anyone I know interested in going through CryptoPals where this is one of the challenges (including implementing this attack in code).