News for hackers. Stuff that matters.

A comment on Maybe we shouldn't skip SHA-3. Parent comment

Re:Maybe we shouldn't skip SHA-3 by nincompope on Friday June 02, 2017 @03:30PM (#14472678)
As far as I can tell, the increase from 18 to 24 rounds was not NIST's call, but due to the zero-sum distinguishers found on Keccak-f, which made it no longer "hermetic": http://keccak.noekeon.org/NoteZeroSum.pdf
[ Parent | on HN ]

There are no comments on this comment yet.