Would a HAIFA-construction based hash function like Argon2 resistant to length-extension attacks?

I say that Argon2 is HAIFA-based because BLAKE is, and Argon2 is based on BLAKE.


migrated from security.stackexchange.com Oct 15 at 6:57

This question came from our site for information security professionals.

  • $\begingroup$ I've unified the title and body on the answer's yes. $\endgroup$ – kelalaka Oct 15 at 8:54


The HAIFA construct as introduced in A Framework for Iterative Hash Functions - HAIFA by Eli Biham and Orr Dunkelman is proposed with the explicit goal of eliminating various pitfalls of the classic Merkle-Damgaard construct.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.