Would a HAIFA-construction based hash function like Argon2 resistant to length-extension attacks?

I say that Argon2 is HAIFA-based because BLAKE is, and Argon2 is based on BLAKE.

  • $\begingroup$ I've unified the title and body on the answer's yes. $\endgroup$ – kelalaka Oct 15 '19 at 8:54


The HAIFA construct as introduced in A Framework for Iterative Hash Functions - HAIFA by Eli Biham and Orr Dunkelman is proposed with the explicit goal of eliminating various pitfalls of the classic Merkle-Damgaard construct.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.