Anzeige
Erschienen in:
2007 | OriginalPaper | Buchkapitel
Constructing an Ideal Hash Function from Weak Ideal Compression Functions
verfasst von : Moses Liskov
Erschienen in: Selected Areas in Cryptography
Verlag: Springer Berlin Heidelberg
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
We introduce the notion of a
weak
ideal compression function, which is vulnerable to strong forms of attack, but is otherwise random. We show that such weak ideal compression functions can be used to create secure hash functions, thereby giving a design that can be used to eliminate attacks caused by undesirable properties of compression functions.
We prove that the construction we give, which we call the “zipper hash,” is
ideal
in the sense that the overall hash function is indistinguishable from a random oracle when implemented with these weak ideal building blocks.
The zipper hash function is relatively simple, requiring two compression function evaluations per block of input, but it is not streamable. We also show how to create an ideal (strong) compression function from ideal weak compression functions, which can be used in the standard iterated way to make a streamable hash function.