3 ms·
Does the same hold for hashes based non on Merkle-Damgard but the sponge construction?
by rocqua 9y ago
Does the same hold for hashes based non on Merkle-Damgard but the sponge construction?
- zamalek 9y agoIt looks like we don't know, excluding some very specific sponge functions, based on some quick research.[1][2] [1]: https://eprint.iacr.org/2017/771.pdf https://eprint.iacr.org/2017/771.pdf [2]: https://crypto.stackexchange.com/questions/419/what-security-do-cryptographic-sponges-offer-against-generic-quantum-attacks/46705 https://crypto.stackexchange.com/questions/419/what-security... (NB: comments)