All Questions
Tagged with compression merkle-damgaard
3 questions
4
votes
2
answers
2k
views
AES-128 as compression function in Merkle-Damgard construction
Using a compression function $f : A × A → A$. A basic version
given by:
$W_0 = IV$
$W_1 = f(W_0, m_1)$
$W_2 = f(W_1, m_2)$
...
$W_n = f(W_{n-1}, m_n)$
$W_n$ is the output of the hash function, $...
- 71
0
votes
1
answer
111
views
Why can an arbitrary compression function mapping $\{0,1\}^{m+2^m} \rightarrow \{0,1\}^m$ not seriously be considered collision resistant?
I recently got a question that I’ld like to share here, since answers might be useful (or at least interesting) for people diving into Merkle-Damgård hash constructions for the first time.
We know ...
- 18.1k
1
vote
1
answer
1k
views
SHACAL-2 vs. AES as underlying block cipher for Secure Hash (aka SHA-256)
The hashing scheme SHA-256 (for instance) is based on Merkle-Damgård construction with the underlying compression function based on the block cipher SHACAL-2 configured in Davies Meyer mode. SHACAL-2 ...
- 1,105