Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Assume d is a 128 bit random integer and P is base point of an elliptic curve and Q = dP is a point on the elliptic curve and SHA is a hash function with 128 bit output, my question is:
Is size Q equal to size SHA(Q)?
If not, then wich is smaller size?

share|improve this question

closed as unclear what you're asking by minar, e-sushi, rath, D.W., Paŭlo Ebermann Aug 25 '13 at 12:16

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question.If this question can be reworded to fit the rules in the help center, please edit the question.

Duplicate of… – minar Aug 24 '13 at 16:01
"The elliptic curve" is undefined, and very relevant. "Size (of) Q" can have several interpretations, for there are several means to define a point on an elliptic curve. No hash form the SHA family is 128-bit. – fgrieu Aug 24 '13 at 16:56
Suppose we take only 128-bits out of 160-bits output in SHA-1 hash function. – star Aug 24 '13 at 17:10
@star Consider this: what if we replace "elliptic curve" in your question with a different finite field, for example the ring of integers modulo n. Do you still think your question can be answered? Don't you think we'd need more information, for example the modulus? – orlp Aug 24 '13 at 18:30

This was answered in the Comments of the math.stackex:

Recall SHA-1 produces a 'fixed length' output, regardless of input, of a 160-bits. For elliptic curves, we could have the points (0,0) all the way up to two 128-bit points (P,Q) if that is your underlying field size. So, you need to be able to handle points that can be as large as 128-bits, but those can be representing integers equal to 0 all the way up to 128-bits. In other words, Q can be zero, but SHA(Q) is 160-bits. Also, I suppose you meant Q to be one of the points (x,y) on the elliptic curve. – Amzoti

Meaning no, they're not equal SHA-1 is larger.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.