nincompope
Re:Elliptic Curves
on Saturday June 10, 2017 @01:54PM (#14528328)
> More progress has been made against conventional multiplicative group Diffie-Hellman than has against curves.
How is "none" more than "none"?
Re:Maybe we shouldn't skip SHA-3
on Friday June 02, 2017 @03:40PM (#14472750)
It's arguable that SHA-3 is better understood than SHA-2, at least in the open research community. The rationales behind every component of SHA-3 are well documented, and the design is very conservative, both in structure and number of rounds. More so than SHA-2.
It is in theory possible that a new technique could break SHA-3 and not SHA-2, but the opposite seems far more plausible.
Re:Maybe we shouldn't skip SHA-3
on Friday June 02, 2017 @03:30PM (#14472678)
As far as I can tell, the increase from 18 to 24 rounds was not NIST's call, but due to the zero-sum distinguishers found on Keccak-f, which made it no longer "hermetic": http://keccak.noekeon.org/NoteZeroSum.pdf