2026-07-10 15:24 UTC
What you want to do is choose unique prefixes (or whatever you do to separate inputs) for every distinct use case you have in your protocol.
The term for this is "domain separation".
What you DON'T want to do is prefix some values and then use a bare cryptographic function in other places.
For example, https://nebuchadnezzar-megolm.github.io/
Replies (1)
-
@soatok@furry.engineer 2026-07-10 15:26
Why not? Because that's the same as the prefix of an empty string. If you know the prefix and can choose the inputs based on how you interact with the protocol, you can choose an input that, synthetically, has that prefix.