7 ms·
Keccak wins the SHA-3 competition
- JL2010 14y agoI find it interesting that the contributors work for semiconductor companies. I would've thought that something like this would be more likely to emerge from a team with a mathematics/CS/academic background more so than hardware. Perhaps these algorithms can (and will) be going strait into some new hardware cryptography IP cores?
- unix-dude 14y agoI only tangentially follow the semiconductor companies... However, I know several advanced algorithms in the realm of cryptography can be computationally expensive, and as demand for security grows, several of these semiconductor companies have implemented things in the hardware to optimize certain forms of encryption. (I can't remember if it was Intel or AMD that released a chip with some sort of built-in support for security). This is just a theory, but if they're going down this road, it would make sense for them to develop a highly secure algorithm that they know can be easily implemented and optimized on the hardware level. If they're developing specialized algorithms AND hardware, they can probably take it into account during the design process and further optimize their boards. Or, a bunch of semiconductor guys are also crypto-geeks. Which is pretty likely anyway :D.
- novalis 14y agoYou were maybe thinking of Intel® vPro™ Technology ?
- lmz 14y agoAES-NI perhaps: http://www.intel.com/content/www/us/en/architecture-and-technology/advanced-encryption-standard--aes-/data-protection-aes-general-technology.html http://www.intel.com/content/www/us/en/architecture-and-tech...
- pjscott 14y agoAll of the SHA-3 candidates were designed to be implementable in fast hardware. Here's a comparison of some of the hardware designs evaluated during the competition: http://ehash.iaik.tugraz.at/wiki/SHA-3_Hardware_Implementations http://ehash.iaik.tugraz.at/wiki/SHA-3_Hardware_Implementati... Keccak is one of the most amenable to hardware acceleration, but all of the finalists were good in both hardware and software.
- cokernel_hacker 14y agoThey are all cryptographers and at least three of them have deep academic backgrounds... Guido Bertoni: http://www.informatik.uni-trier.de/~ley/db/indices/a-tree/b/Bertoni:Guido.html http://www.informatik.uni-trier.de/~ley/db/indices/a-tree/b/... Joan Daemen: http://www.informatik.uni-trier.de/~ley/db/indices/a-tree/d/Daemen:Joan.html http://www.informatik.uni-trier.de/~ley/db/indices/a-tree/d/... Gilles Van Assche: http://www.informatik.uni-trier.de/~ley/db/indices/a-tree/a/Assche:Gilles_Van.html http://www.informatik.uni-trier.de/~ley/db/indices/a-tree/a/... Joan Daemen has a PhD, his thesis was "Cipher and Hash Function Design. Strategies based on linear and differential cryptanalysis" Gilles Van Assche was a PhD student at the University of Brussels studying "classical and quantum information theory" (http://gva.noekeon.org/ http://gva.noekeon.org/)
- zhuzhuor 14y agoJust to add another fact here: Daemen is also one of the two co-authors of AES
- tptacek 14y agoDiscussion here: http://news.ycombinator.com/item?id=4604188 http://news.ycombinator.com/item?id=4604188
- derrida 14y agoDear media: It's pronounced 'ketchup'.
- gjm11 14y agoNo, it's pronounced "ketchak". See http://keccak.noekeon.org/specs_summary.html http://keccak.noekeon.org/specs_summary.html .
- turtlepower 14y agoIt's pronounced "shah three."
- gourneau 14y agoWhy is the Bid/Ask spread so high right now for STMs stock? http://finance.yahoo.com/q?d=t&s=STM http://finance.yahoo.com/q?d=t&s=STM
- dfc 14y agoThis is normal for low volume stocks during after hours trading.
- e1ven 14y agoSo, if I'm writing a new application in 2012, should I use SHA-512, or keccak? If course SHA2 will have better library support... What other considerations are there?
- zokier 14y agoObvious solution would be to make the application capable of using both. I would default to SHA-512, but I don' see any reason why the hash function should be fixed.
- tptacek 14y agoInteresting footnote: because of concerns about the security of both SHA-1 and MD5, the original SSL3 protocol used both MD5 and SHA1 as its PRF. TLS 1.1 changes that with a PRF that relies solely on SHA-2.
- tptacek 14y agoYou should use SHA2 for now, but be careful no matter what you use.
- brazzy 14y agoGiven that Bruce Schneier wrote that he'd prefer not having an SHA-3 winner since the SHA-2 algorithms were not showing any weaknesses yet...
- maaku 14y agoThat's out of context; Schneier said there isn't one that's significantly better (which he defined as "orders of magnitude") than SHA-2. But they're all strictly better than SHA-2. If you're writing a new application, by all means use the new standard. If you have an existing application or have to interface with existing frameworks, use SHA-2.
- qznc 14y agoThey are strictly better in theory. However, you should keep in mind that SHA-2 is much more battle-tested over the years.
- zheng 14y agoLet's say I know a little bit about crypto in general, and wanted to write a software implementation of Keccak/SHA-3 as an academic endeavor. How hard would it be? I'm not looking to produce something that will be certifiably secure against side channel attacks, just something that is reasonably performant and can produce the correct results.
- loeg 14y agoTrivial. See this "Readable C implementation of Keccak": http://www.mjos.fi/dist/readable_keccak.tgz http://www.mjos.fi/dist/readable_keccak.tgz
- chmike 14y agoIs there a free to use and fast implementation of SHA3 in C available ?
- dchest 14y agoNo, the standard hasn't been published yet. Yes, see here for Keccak implementations http://keccak.noekeon.org/files.html http://keccak.noekeon.org/files.html
- __alexs 14y agohttp://keccak.noekeon.org/files.html http://keccak.noekeon.org/files.html The C code appears to be public domain. Which might be a problem in regions in which public domain is not a thing but should otherwise be fine for use in most projects.
- dchest 14y agoIt's not the problem, the code is under Creative Commons Zero public domain dedication http://creativecommons.org/publicdomain/zero/1.0/ http://creativecommons.org/publicdomain/zero/1.0/
- mykhal 14y agoit's funny, we have new standard, so sha256sum, .., sha512sum utilities should start providing us different results - Keccak, instead of SHA-2 :) i'm wondering how the naming issue is going to be solved
- fpp 14y agoWikipedia already has a 3 page description of the Keccak hash approach https://en.wikipedia.org/wiki/Keccak https://en.wikipedia.org/wiki/Keccak