Binary
Binary

Reputation: 157

Does a linear cryptographic hash function exist?

Does a linear cryptographic hash function exist?

By linear I mean a function 'f' such that:

enter image description here

enter image description here

where + is mod n for some large constant n

Upvotes: 0

Views: 342

Answers (1)

John Meacham
John Meacham

Reputation: 821

Yes,the cryptographically strong SWIFFT algorithm (a variant was a condender for the SHA3 standard) is linear such that h(a + b) = h(a) + h(b)

It is an interesting example of a hash that is both cryptographically strong and not psuedorandom. It is also another unexpected use of the much lauded FFT algorithm.

http://en.wikipedia.org/wiki/SWIFFT

Upvotes: 1

Related Questions