All Questions
1 question
4
votes
2
answers
2k
views
AES-128 as compression function in Merkle-Damgard construction
Using a compression function $f : A × A → A$. A basic version
given by:
$W_0 = IV$
$W_1 = f(W_0, m_1)$
$W_2 = f(W_1, m_2)$
...
$W_n = f(W_{n-1}, m_n)$
$W_n$ is the output of the hash function, $...
- 71