3
$\begingroup$

I'm trying to apply the hash function combination method described in https://eprint.iacr.org/2013/210.pdf to a HKDF PRNG construction. Thing is it needs 4 uniformly random parameters/keys chosen by the signer during the combination step, but that's what I was already using the PRNG for so it feels like I'm running into some chicken-egg problem.

What would be the recommended way to generate these keys? Is it at all possible to strengthen PRNGs with this trick?

Improve this question
$\endgroup$
3
  • $\begingroup$ In general collision resistance is not something that a PRF should be protected against, if I'm not mistaken. $\endgroup$
    – Maarten Bodewes ♦
    Mar 5, 2018 at 22:31
  • 1
    $\begingroup$ It's about improving pre-image resistance to the strongest of the selected hash functions. The keys should be uncorrelated and are known to any attacker, so it does require pre-image resistance if I understand correctly... $\endgroup$
    – user56697
    Mar 5, 2018 at 22:37
  • 1
    $\begingroup$ Simply XORing the results is also not an option, even if collision resistance is not important, the functions may be correlated. $\endgroup$
    – user56697
    Mar 5, 2018 at 23:02

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.