npscalar

3 ms·

1.
by npscalar 9y ago
Agreed. No contradiction. keccak.team does not say ARX is broken, only harder to analyze (and slow in HW, and getting obsoleted).
2.
by npscalar 9y ago
It is however a fact that several cryptographers are moving away from ARX. Some do that for hardware efficiency (e.g., as promoted by NORX designers), some do that to better estimate impacts of differential cryptanalysis (e.g., MD6, probabl
3.
by npscalar 9y ago
Yes and no. After all, these are just modes using Keccak (think, say, AES-CBC, AES-GCM all use AES), so the choice depends more on the purpose than anything else. But indeed, the naming is confusing. Instead of SHA3-256, SHAKE256, KMAC256 a
4.
by npscalar 9y ago
Blake2, modern? With the same addition/xor mixture and narrow pipe Merkel-Damgard as MD4, MD5 or SHA-1/2, it's kinda old fashioned.
5.
by npscalar 9y ago
Mismatches can show an interesting property. It is likely that SHA-256 is slower than Keccak on 64-bit platforms, and that SHA-512 is slower than Keccak on 32-bit platform.
6.
by npscalar 9y ago
This page has an interesting speed graph: http://kangarootwelve.org/
7.
by npscalar 9y ago
And all the SHA-3-derived functions in SP 800-185. For instance, ParallelHash is super fast and a NIST standard.
8.
by npscalar 9y ago
Even after 16 yrs, SHA-2 has actually not received so much cryptanalysis effort, the majorty of which comes from the same group, and the effort is further diluted into two different 32/64-bit designs [1]. Add to that the absence of ope