3 ms·
You can, and you just invented the Sponge construction in the process! :) The key idea is to only expose part of the state to inputs/outputs.
by remcob 9y ago
You can, and you just invented the Sponge construction in the process! :)
The key idea is to only expose part of the state to inputs/outputs.
- tptacek 9y agoSure, but SHA-2 512/224 predates SHA-3 and the Sponge construction by, what, a decade and a half? And prefix MACs predate all these things by multiple decades (they just happen to be insecure in full-width-output MD hashes). I don't think the ability to use Keccak as a simple prefix MAC is all that gamechanging. You can hash data once --- and much, much faster --- by using SHA-2.
- ctz 9y agoThis is an example of a wide-pipe hash function, not a sponge.