Errata to Sound Hashing Modes of Arbitrary Functions, Permutations, and Block Ciphers

Aldo Gunsing, Joan Daemen, Bart Mennink
2020 IACR Transactions on Symmetric Cryptology  
In ToSC 2018(4), Daemen et al. performed an in-depth investigation of sound hashing modes based on arbitrary functions, permutations, or block ciphers. However, for the case of invertible primitives, there is a glitch. In this errata, we formally fix this glitch by adding an extra term to the security bound, q/2b−n, where q is query complexity, b the width of the permutation or the block size of the block cipher, and n the size of the hash digest. For permutations that are wider than two times
more » ... he chaining value this term is negligible. For block cipher based hashing modes where the block size is close to the digest size, the term degrades the security significantly.
doi:10.13154/tosc.v2020.i3.362-366 dblp:journals/tosc/GunsingDM20 fatcat:o57p54g2gff7floac47hvodmxy