5
$\begingroup$

It is possible to convert a pre-image resistant function $f:\{0,1\}^{n}\rightarrow \{0,1\}^{n}$ to a second-preimage resistant function? I am thinking to use a pseudo-random generator and construct that second pre-image resistant function in this way:

$$F(x)=f(x)+\text{PRNG}(x).$$

What kind of tests I need to make to verify this function is second-preimage resistant?

Improve this question
$\endgroup$
9
  • $\begingroup$ Just let me quickly recap this: $f$ is pre-image resistant and $F$ should be pre-image resistant and second pre-image resistant? $\endgroup$
    – SEJPM
    Commented Jul 26, 2015 at 13:01
  • $\begingroup$ @SEJPM Yes it is $\endgroup$
    – juaninf
    Commented Jul 26, 2015 at 13:06
  • 1
    $\begingroup$ Related: crypto.stackexchange.com/questions/27071/… $\endgroup$
    – otus
    Commented Jul 26, 2015 at 13:30
  • 2
    $\begingroup$ @mikeazo The length preservation indeed makes things a bit trivial. to "convert" just ignore the function and use the identity function instead (or any other permutation for that matter). Since there is only one preimage for each image, there can be no second preimage attack. $\endgroup$
    – Maeher
    Commented Jul 29, 2015 at 16:04
  • 1
    $\begingroup$ @Maeher but with the identity function, you don't have preimage resistance. $\endgroup$
    – mikeazo
    Commented Jul 29, 2015 at 16:23

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.