Open AccessErrata to Sound Hashing Modes of Arbitrary Functions, Permutations, and Block Ciphers
Author(s) -
Aldo Gunsing,
Joan Daemen,
Bart Mennink
Publication year - 2020
Publication title -
iacr transaction on symmetric cryptology
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.715
H-Index - 10
ISSN - 2519-173X
DOI - 10.46586/tosc.v2020.i3.362-366
Subject(s) - block cipher , block size , hash function , permutation (music) , block (permutation group theory) , computer science , cbc mac , block cipher mode of operation , chaining , universal hashing , mathematics , cryptography , algorithm , cryptographic hash function , combinatorics , double hashing , physics , key (lock) , computer security , acoustics , psychology , psychotherapist
In ToSC 2018(4), Daemen et al. performed an in-depth investigation of sound hashing modes based on arbitrary functions, permutations, or block ciphers. However, for the case of invertible primitives, there is a glitch. In this errata, we formally fix this glitch by adding an extra term to the security bound, q/2b−n, where q is query complexity, b the width of the permutation or the block size of the block cipher, and n the size of the hash digest. For permutations that are wider than two times the chaining value this term is negligible. For block cipher based hashing modes where the block size is close to the digest size, the term degrades the security significantly.