Re:Show HN: Shishua – Fast pseudo-random generator
by HAPMCEZ on Sunday April 19, 2020 @01:25AM
(#22913752)
Intuitively, yes.
If something is irreversible then it's not 1 to 1 and you don't use the whole state space, so you'll likely have short cycles.
Second part, again yes. But you can add that useful irreversible transform in the finalization of the output, and not in the state transform itself.
I'm self taught so my understanding and terminology may not mesh with the people who have been taught this.
Re:Show HN: Shishua – Fast pseudo-random generator
by KMag on Saturday April 18, 2020 @11:44PM
(#22913336)
CSRNGs are mentioned a few times in TFA, but cryptographic security doesn't appear to be among the design criteria for SHISHUA. There's no mention of linear or differential crpytanalisis, which is table stakes for a CSPRNG.
Re:Show HN: Shishua – Fast pseudo-random generator
by espadrine on Sunday April 19, 2020 @02:50AM
(#22914078)
I added a warning in the GitHub’s Readme. SHISHUA is not to be used for cryptographic purposes.
You mentioned the lack of cryptanalysis; there is also the lack of rounds (which prevents researchers from breaking partial versions to ease their study, and allows setting a security margin).
Why is irreversibility a bad thing? Is it just the loss of useful state which reduces the internal entropy?
Is irreversibility ever useful? Wouldn't some amount of discarded bits make it harder for an adversary to infer the state?