Re:Maybe Skip SHA-3
by tptacek on Wednesday May 31, 2017 @04:19PM
(#14455577)
Sure, but SHA-2 512/224 predates SHA-3 and the Sponge construction by, what, a decade and a half?
And prefix MACs predate all these things by multiple decades (they just happen to be insecure in full-width-output MD hashes).
I don't think the ability to use Keccak as a simple prefix MAC is all that gamechanging. You can hash data once --- and much, much faster --- by using SHA-2.
And prefix MACs predate all these things by multiple decades (they just happen to be insecure in full-width-output MD hashes).
I don't think the ability to use Keccak as a simple prefix MAC is all that gamechanging. You can hash data once --- and much, much faster --- by using SHA-2.