3 ms·
Merkle–Damgård algorithms are thought to be safe. I'm not sure about Keccak.
by zamalek 9y ago
Merkle–Damgård algorithms are thought to be safe. I'm not sure about Keccak.
- dsacco 9y agoKeccak (SHA-3) is currently thought to be safe. The current state of the art would be Brassard-Hoyer-Tapp[1], but SHA3-512 should be secure against that. It's basically a birthday attack that generates a giant table, then uses Grover's algorithm to find a collision. _______ 1. https://link.springer.com/chapter/10.1007%2FBFb0054319 https://link.springer.com/chapter/10.1007%2FBFb0054319