Reputation
Top tag
Next privilege 25,000 Rep.
Access to site analytics
Badges
6 37 88
Newest
 Nice Answer
Impact
~637k people reached

May
13
revised Hash collision resistance of $\mathcal H^\prime(m) = \mathcal H(\mathcal H(m)|m)$
Remove broken claim about Joux multicollisions.
May
12
revised Are hash functions chaotic?
added 346 characters in body; added 127 characters in body
May
12
answered Hash collision resistance of $\mathcal H^\prime(m) = \mathcal H(\mathcal H(m)|m)$
May
12
comment Finding the LFSR and connection polynomial for binary sequence.
Cross-posted on Math.SE. Please don't cross-post. That fragments answers and violates site rules.
May
12
answered Are hash functions chaotic?
May
12
comment Cryptographically secure keyed rolling hash function
You got 50 or 56 MB/s, and your goal was about 60 MB/s: sounds like you're basically done. Intel processors are widely deployed on servers, and modern Intel processors do support AES-NI. If in your application domain the processors typically don't support AES-NI, then you might want to measure what processors are used by your users (hint: make sure to measure), then do some research on other efficient block ciphers/PRFs (there are other candidates). SipHash is probably fine, if it meets your performance requirements, but I haven't studied it in detail. 128-bit keys are plenty.
May
10
comment Cryptographically secure keyed rolling hash function
Thanks, @RickyDemer, I've edited my answer accordingly. Universality is all that matters (all that matters is the probability that two inputs yield the same output.) I agree with both of your comments -- thank you for them.
May
10
revised Cryptographically secure keyed rolling hash function
added 10 characters in body
May
10
comment Cryptographically secure keyed rolling hash function
Sorry, I'm still not clear on how Tarsnap works. When is the substitution done? Is it applied to the input data, or to the output? If it substitutes from bytes to 32-bit values, does it expand the size of the input by 4x before hashing (or expand the size of the output by 4x after hashing)?
May
10
comment Cryptographically secure keyed rolling hash function
@cyril42e, have you benchmarked it? The AES-NI instructions are surprisingly fast. So you might want to implement, benchmark, and see if it meets your performance requirements. If it doesn't, I suggest editing your question to describe your performance requirements and how close this scheme gets and what you tried, to improve performance. Selecting the fastest block cipher for your platform is beyond the scope of this question, but you can find lots of other questions here that talk about that, or you can ask a new question.
May
9
revised Cryptographically secure keyed rolling hash function
Add an attack.
May
9
revised Cryptographically secure keyed rolling hash function
added 1277 characters in body
May
9
comment Cryptographically secure keyed rolling hash function
Thanks for the update. I'm still not clear on how Attic and Tarsnap work. Is the substitution applied to the input data, or to the output of the Rabin-Karp/cyclic hash? I don't know what you mean by "HMAC of indexes". Would you like to try expressing it in mathematics?
May
9
comment On modeling a random oracle hash function which maps $\mathbb{G}_1 \rightarrow \mathbb{G}_2$
What do you mean by "model a random oracle hash function"? Also, do you require it to be a group homomorphism?
May
9
comment Cryptographically secure keyed rolling hash function
Also, if you want us to comment on the security of Tarsnap or Attic, please define more precisely what you mean by "random secret substitution".
May
9
answered Cryptographically secure keyed rolling hash function
May
2
awarded  Nice Answer
May
1
answered reverse an identicon to its source string
May
1
revised Is the CONF key sharing Problem equivalent to discrete log problem?
added 318 characters in body; added 7 characters in body; added 15 characters in body; added 18 characters in body; added 26 characters in body
May
1
answered Is the CONF key sharing Problem equivalent to discrete log problem?