Content deleted Content added
Kaltenmeyer (talk | contribs) m edited refs |
Kaltenmeyer (talk | contribs) m close parens |
||
Line 11:
* The second-party (''the server''), knows the ''secret'' ('''S'''), but does not learn either the input ('''I'''), nor the output ('''O''').
* The function has the same security properties as any [[Cryptographic_hash_function|cryptographically-secure]] pseudorandom function:
** It is hard to find two inputs with the same output (i.e. it is [[Hash_collision|collision resistant]])
** It is hard to invert (i.e. it is resistant to [[Preimage_attack|preimage attacks]])
** It is hard to distinguish the output from [[Cryptographically_secure_pseudorandom_number_generator#Requirements|true randomness]]
| |||