Abstract
| Original language | English |
|---|---|
| Number of pages | 36 |
| Publication status | Published - 2019 |
Fingerprint
Bibliographical note
https://eprint.iacr.org/2019/492Cite this
}
Decisional second-preimage resistance : when does SPR imply PRE? / Bernstein, Daniel J.; Hülsing, Andreas T.
36 p. 2019, .Research output: Other contribution › Academic
TY - GEN
T1 - Decisional second-preimage resistance
T2 - when does SPR imply PRE?
AU - Bernstein, Daniel J.
AU - Hülsing, Andreas T.
N1 - https://eprint.iacr.org/2019/492
PY - 2019
Y1 - 2019
N2 - There is a well-known gap between second-preimage resistance and preimage resistance for length-preserving hash functions. This paper introduces a simple concept that fills this gap. One consequence of this concept is that tight reductions can remove interactivity for multi-target length-preserving preimage problems, such as the problems that appear in analyzing hash-based signature systems. Previous reduction techniques applied to only a negligible fraction of all length-preserving hash functions, presumably excluding all off-the-shelf hash functions.
AB - There is a well-known gap between second-preimage resistance and preimage resistance for length-preserving hash functions. This paper introduces a simple concept that fills this gap. One consequence of this concept is that tight reductions can remove interactivity for multi-target length-preserving preimage problems, such as the problems that appear in analyzing hash-based signature systems. Previous reduction techniques applied to only a negligible fraction of all length-preserving hash functions, presumably excluding all off-the-shelf hash functions.
M3 - Other contribution
ER -