3 ms·
He's talking about 12 to 16 byte outputs though, which is 96-128 bits of preimage resistance, and only 48-64 bits of collision resistance.. which would be very
by garmaine 7y ago
He's talking about 12 to 16 byte outputs though, which is 96-128 bits of preimage resistance, and only 48-64 bits of collision resistance.. which would be very broken today.
- SlowRobotAhead 7y agoMostly. There are 12-16 byte hash or hash-like results are plenty secure. They’re keyed though. The output from HMAC and AEAD ciphers with no encryption (think the additional data portion of ChaCha20-Poly1305 in a Nonce-MAC mode)... or maybe I’m wrong because these require nonces and keys.
- garmaine 7y agoWhether you are using it in a keyed authentication mode is orthogonal to collision resistance.