Skip to main content

New answers tagged

0 votes

Why is the sum of hashes not a proper homomorphic hash function?

I believe this shows that the scheme is a lot less secure than the original hash function $H$, with a security parameter only proportional to the square root of the output size of $H$, in the ideal ...
Philippe's user avatar
3 votes

Why is the sum of hashes not a proper homomorphic hash function?

The issue here is that even if the distribution of $H$ is uniform (which is the ideal that we aim for), the distribution of $\sum H$ is not. Thus if $n=2$ the distribution is triangular and as $n$ ...
Daniel S's user avatar
  • 24.1k

Top 50 recent answers are included