[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Cfrg] Fwd: Hash-Based Key Derivation (fwd)


On Oct 28, 2005, at 6:15 PM, D. J. Bernstein wrote:
You can turn AES into a hash function by applying, e.g., Luby-Rackoff
plus Miyaguchi-Preneel. Using this hash function to derive keys is then
identical to using AES to derive keys.

Dr. Bernstein, could you please describe (or give reference to) a way to produce a hash function H from AES, such that HMAC-H is a provably secure PRF, based only on the assumption that AES is a secure PRP? Thanks. -John

_______________________________________________
Cfrg mailing list
Cfrg at ietf.org
https://www1.ietf.org/mailman/listinfo/cfrg