SipHash and HalfSipHash Added to Linux Kernel

Re:SipHash and HalfSipHash Added to Linux Kernel by Arnt on Tuesday January 10, 2017 @12:55PM (#13367034)

People do that. I've done it myself. But all the math about SHA's security properties is about absence of collisions in the full result, not about relative frequency in a small part of the result.

Maybe SHA-8 works fine. I don't know. I've never seen any real mathematical investigation of that, and that's the point.

[ Parent | on HN ]

Re:SipHash and HalfSipHash Added to Linux Kernel by dchest on Tuesday January 10, 2017 @04:59PM (#13369527)

A secure cryptographic hash function's collision resistance should be MIN(output_length/2, claimed_security). For example, SHA-256 collision security is 128 bits with 256-bit output, but if you truncate output to 128 bits, collision resistance will be 64 bits.

[ Parent | on HN ]

Re:SipHash and HalfSipHash Added to Linux Kernel by eternalban on Tuesday January 10, 2017 @01:02PM (#13367131)

Isn't a secure hash supposed to have bit independence?

[ Parent | on HN ]