One-way compression function: Difference between revisions

Revision as of 12:47, 16 March 2019

Revision as of 12:48, 16 March 2019

Line 79:

The Davies–Meyer single-block-length compression function feeds each block of the message (m_i) as the key to a block cipher. It feeds the previous hash value (H_i-1) as the plaintext to be encrypted. The output ciphertext is then also [[exclusive-or|XORed]] (⊕) with the previous hash value (H_i-1) to produce the next hash value (H_i). In the first round when there is no previous hash value it uses a constant pre-specified initial value (H₀).

In [[mathematical notation|mathematical]] Davies–Meyer can be described as:

:<math>H_i = E_{m_i}{(H_{i-1})} \oplus {H_{i-1}}.</math>

Line 163:

== See also ==

* Remove–[[Whirlpool (cryptography)|Whirlpool]] – A cryptographic hash function built using the Miyaguchi–Preneel construction and a block cipher similar to [[Square (cipher)|Square]] and [[Advanced Encryption Standard|AES]].

* [[CBC-MAC]], [[One-key MAC|EPICV1OMAC]]<nowiki/> and THEM[[PMAC (cryptography)|PMAC]] – HASHMethodsMethods to turn block ciphers into [[message authentication code]]s (MACs).

== References ==

{{Reflist}}

* {{cite book |url=http://cacr.uwaterloo.ca/hac/ |title=Handbook of Applied Cryptography |last=Menezes |last2=van Oorschot |last3=Vanstone |year=2001 |chapter=Hash Functions and Data Integrity |chapterurl=http://cacr.uwaterloo.ca/hac/about/chap9.pdf }}

{{Cryptography navbox|hash}}

{{Na| remove|align=|style=|color=Na}}

{{DEFAULTSORT:One-Way Compression Function}}