h h h h
play

h h h h C 3 = H ( M ) IV= C 0 C 1 C 2 C 3 256 1 Davis-Meyer 2 - PowerPoint PPT Presentation

MerkleDamgrd Hash Pad( M ) determines M |Pad( M )| is a positive multiple of n | M |=| M | |Pad( M )|=|Pad( M )| | M || M | last(Pad( M )) last(Pad( M )) 100 512 M 1 M 2 M 3 M 4 Pad 512 10*| M | M 1 M 2 M 3 M 4 h


  1. Merkle–Damgård Hash Pad( M ) determines M |Pad( M )| is a positive multiple of n | M |=| M ′| ⇒ |Pad( M )|=|Pad( M ′)| | M |≠| M ′| ⇒ last(Pad( M )) ≠ last(Pad( M ′)) 100 512 M 1 M 2 M 3 M 4 Pad 512 10*| M | M 1 M 2 M 3 M 4 h h h h C 3 = H ( M ) IV= C 0 C 1 C 2 C 3 256 1

  2. Davis-Meyer 2

  3. algorithm SHA256BC (w, a b c d e f g h) // blockcipherunderlying SHA-256 (k[0],…, k[63]) ← constants Regard w as words w[0]...w[15] for i ← 16 to 63 s0 ← (w[i-15] >>> 7) ⊕ (w[i-15] >>> 18) ⊕ (w[i-15] >>> 3) s1 ← (w[i-2] >>> 17) ⊕ (w[i-2] >>> 19) ⊕ (w[i-2] >>> 10) w[i] ← w[i-16] + s0 + w[i-7] + s1 for i ← 0 to 63 S1 ← (e >>> 6) ⊕ (e >>> 11) ⊕ (e >>> 25) ch ← (e ∧ f) ⊕ (~e ∧ g) temp1 ← h + S1 + ch + k[i] + w[i] S0 ← (a >>> 2) ⊕ (a >>> 13) ⊕ (a >>> 22) maj ← (a ∧ b) ⊕ (a ∧ c) ⊕ (b ∧ c) temp2 ← S0 + maj (a,b,c,d,e,f,g,h) ← (temp1+temp2,a,b,c,d+temp1,e,f,g) return a || b || c || d || e || f || g || h 3

  4. One round (of 64) of the blockcipher sha256 underlying SHA256 4

  5. SHA-3 – Keccak [Guido Bertoni, Joan Daemen, Michaël Peeters, Gilles Van Assche] r=1088 bits c=512 bits 5

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend


More recommend