Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
3
Newest
 Supporter
Impact
~16k people reached

  • 0 posts edited
  • 0 helpful flags
  • 3 votes cast
Jan
28
comment Why does Skein use an output transform, but other similar hashes don't?
You do not need any output transformation at all. :-) In the case of SKEIN, the authors claim the following: "Originally we applied the output transformation only if the output size was larger than the state size. Unfortunately, without the output transform, you can construct two messages M and M' such that H(M) xor H(M) is the same as the XOR of the last blocks of M and M . (A similar property has recently been described for SHA-1 [101].) This violates the requirement that the hash function behave like a random mapping." -- The Skein Hash Function Family, Version 1.3.