This is great, thank you! This was on my wishlist for a few years: https://www.reddit.com/r/crypto/comments/7imejm/monthly_cryptography_wishlist_thread_decembe

This is great, thank you! This was on my wishlist for a few years: https://www.reddit.com/r/crypto/comments/7imejm/monthly_cryptography_wishlist_thread_december_2017/dr00e10/ https://www.reddit.com/r/crypto/comments/7imejm/monthly_cryp... I've tried to take a stab at this problem, but was not sure if it worked at all: https://gist.github.com/dchest/50d52015939a5772497815dcd33a7983 https://gist.github.com/dchest/50d52015939a5772497815dcd33a7... It's a modified BuzHash with the following changes: - Substitution table is pseudorandomly permuted (NB: like Borg). - Initial 32-bit state is derived from key. - Window size slightly varies depending on key (by ~1/4). - Digest is scrambled with a 32-bit block cipher. I also proposed adding (unspecified) padding before encrypting chunks to further complicate discovering their plaintext lengths. Glad to see I was on the right track :)