One-way compression function: Difference between revisions

Content deleted Content added
Line 55:
== Fast wide pipe construction ==
[[Image:FastWidePipeHashFunction.png|thumb|400px|right|The Fast wide pipe hash construction. Half of chaining value is used in the compression function.]]
It has been demonstrated by Mridul Nandi and [[Souradyuti Paul]] that the Widepipe hash function can be made approximately twice faster, if the widepipe state can be divided in half in the following manner: one half is inputted to the succeeding compression function when the other half is combinedfeed-forwarded to be XORed with the output of that compression function.<ref name="NP10">Mridul Nandi and Souradyuti Paul. Speeding Up the Widepipe: Secure and Fast Hashing. In Guang Gong and Kishan Gupta, editor, Indocrypt 2010, Springer, 2010.</ref>
 
The main idea of the hash construction is to feed-forward half of the previous chaining value to XOR it to the output of the compression function. In so doing the construction takes in longer messageblock every iteration than original wide-pipe. However, the price to pay is the extra memory used in the construction for feed-forward.
 
== Construction from block ciphers ==