4 ms·
Just to make sure I'm understanding correctly, I think that your intent is that rainbow is / should be treated as cryptographically weaker than SIPhash, right?
by dgacmu 2y ago
Just to make sure I'm understanding correctly, I think that your intent is that rainbow is / should be treated as cryptographically weaker than SIPhash, right? (despite both of them not being something you would use in a high security context)
- keepamovin 2y agoRight: rainbow has not been evaluated for HMAC or PRF (Sip's main security objectives), but it's not designed to be secure, just to have good stats and be fast af. I wouldn't be surprised if it was a good PRF, but also wouldn't be surprised if it was broken (by the standards of cryptohashes or HMAC or even PRF). Some more about sip: https://docs.kernel.org/security/siphash.html https://docs.kernel.org/security/siphash.html
- keepamovin 2y agoHowever there’s some chance it’s actually better and more secure than Rainstorm