4 ms·
Kravatte (briefly mentioned in the paper), Keyak, and Ketje (all using the keccak permutation) do use fewer rounds than SHA-3, e.g. 12 in the case of Keyak. Th
by joveian 7y ago
Kravatte (briefly mentioned in the paper), Keyak, and Ketje (all using the keccak permutation) do use fewer rounds than SHA-3, e.g. 12 in the case of Keyak.
The paper is describing what cryptographers have been doing the past 5ish years at least (see various CAESAR contest entries, the forms of Masked Even-Mansour that use 4 or 6 rounds of BLAKE2b permutation, etc.), but maybe encouraging them to push more in that direction.
http://eprint.iacr.org/2016/1188.pdf http://eprint.iacr.org/2016/1188.pdf
https://keccak.team/files/Keyakv2-doc2.2.pdf https://keccak.team/files/Keyakv2-doc2.2.pdf
https://keccak.team/files/Ketjev2-doc2.0.pdf https://keccak.team/files/Ketjev2-doc2.0.pdf