Advertisement
Published in:
2006 | OriginalPaper | Chapter
Multi-Property-Preserving Hash Domain Extension and the EMD Transform
Authors : Mihir Bellare, Thomas Ristenpart
Published in: Advances in Cryptology – ASIACRYPT 2006
Publisher: Springer Berlin Heidelberg
Activate our intelligent search to find suitable subject content or patents.
Select sections of text to find matching patents with Artificial Intelligence. powered by
Select sections of text to find additional relevant content using AI-assisted search. powered by
We point out that the seemingly strong
pseudorandom oracle preserving
(
PRO-Pr
) property of hash function domain-extension transforms defined and implemented by Coron et. al. [1] can actually
weaken
our guarantees on the hash function, in particular producing a hash function that fails to be even collision-resistant (CR) even though the compression function to which the transform is applied is CR. Not only is this true in general, but we show that
all
the transforms presented in [1] have this weakness. We suggest that the appropriate goal of a domain extension transform for the next generation of hash functions is to be multi-property preserving, namely that one should have a
single
transform that is simultaneously at least collision-resistance preserving, pseudorandom function preserving and
PRO-Pr
. We present an efficient new transform that is proven to be multi-property preserving in this sense.