Timeline for Guarding against cryptanalytic breakthroughs: combining multiple hash functions
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 17, 2016 at 19:32 | comment | added | Extrarius | I would expect collision resistance at least as good as the strongest hash (as for just concating the base hashes, since HMAC is ultimately the output of a call to the base hash). I would expect similar properties for preimage resistance, since each part of the final output depends not only on the data but also a pseudo-random key derived from all the base hashes. Unlike simple hashes, finding a preimage for one of the base hashes still doesn't let you use that string to generate the other HMACs without the key, so you can't use the others to select among the possible preimages. | |
| Jan 17, 2016 at 10:04 | comment | added | otus | With your equation that uses full $K$ for each HMAC, concatenation would work just as well – I missed the part where you said one could drop some of the bits. By "what properties", I meant what you think the collision resistance, preimage resistances etc. would be here. | |
| Jan 16, 2016 at 22:32 | comment | added | Extrarius | Interleaving the hash outputs to make the HMAC key means that each HMAC depends on bits from every hash algorithm, while concatenation would end up with each HMAC just being $HMAC_{H_n}(H_n(x), x)$. If the key depends on all the base hash functions, forging any single element of the final concatenation of HMACs should require breaking all the base hash functions (or at least the bits of each hash used for that key). | |
| Jan 16, 2016 at 8:30 | comment | added | otus | What is the purpose of interleaving, rather than concatenating the bits? And what properties do you believe this combination would have that others do not? | |
| Jan 15, 2016 at 17:51 | review | Late answers | |||
| Jan 15, 2016 at 22:57 | |||||
| Jan 15, 2016 at 17:34 | review | First posts | |||
| Jan 16, 2016 at 8:30 | |||||
| Jan 15, 2016 at 17:31 | history | answered | Extrarius | CC BY-SA 3.0 |