nincompope

4 ms·

1. 1.▲
   by nincompope 9y ago

   > More progress has been made against conventional multiplicative group Diffie-Hellman than has against curves. How is "none" more than "none"?
2. 2.▲
   by nincompope 9y ago

   It's arguable that SHA-3 is better understood than SHA-2, at least in the open research community. The rationales behind every component of SHA-3 are well documented, and the design is very conservative, both in structure and number
3. 3.▲
   by nincompope 9y ago

   As far as I can tell, the increase from 18 to 24 rounds was not NIST's call, but due to the zero-sum distinguishers found on Keccak-f, which made it no longer "hermetic": http://keccak.noekeon.org/NoteZeroSum.