Permutation-Based Hashing Beyond the Birthday Bound

Abstract: It is known that the sponge construction is tightly indifferentiable from a random oracle up to around 2c/2 queries, where c is the capacity. In particular, it cannot provide generic security better than half of the underlying permutation size. In this paper, we aim to achieve hash function security beating this barrier. We present a hashing mode based on two b-bit permutations named the double sponge. The double sponge can be seen as the sponge embedded within the double block length hashing paradigm, making two permutation calls in parallel interleaved with an efficient mixing function. Similarly to the sponge, the permutation size is split as b = r+c, and the underlying compression function absorbs r bits at a time. We prove that the double sponge is indifferentiable from a random oracle up to around 22c/3 queries. This means that the double sponge achieves security beyond the birthday bound in the capacity. In addition, if c > 3b/4, the double sponge beats the birthday bound in.... https://tosc.iacr.org/index.php/ToSC/article/view/11402

Location
Deutsche Nationalbibliothek Frankfurt am Main
Extent
Online-Ressource
Language
Englisch

Bibliographic citation
Permutation-Based Hashing Beyond the Birthday Bound ; volume:2024 ; number:1 ; year:2024
IACR transactions on symmetric cryptology ; 2024, Heft 1 (2024)

Creator
Lefevre, Charlotte
Mennink, Bart

DOI
10.46586/tosc.v2024.i1.71-113
URN
urn:nbn:de:101:1-2024032017560953064389
Rights
Open Access; Der Zugriff auf das Objekt ist unbeschränkt möglich.
Last update
14.08.2025, 10:48 AM CEST

Data provider

This object is provided by:
Deutsche Nationalbibliothek. If you have any questions about the object, please contact the data provider.

Associated

  • Lefevre, Charlotte
  • Mennink, Bart

Other Objects (12)