Compression Function Design Principles Supporting Variable Output Lengths from a Single Small Function

In this paper, we introduce new compression function design principles supporting variable output lengths (multiples of size n). They are based on a function or block cipher with an n-bit output size. In the case of the compression function with a (t + 1)n-bit output size, in the random oracle and ideal cipher models, their maximum advantages from the perspective of collision resistance are O( t2 q 2tn + q2 2(t+1)n ). In the case of t = 1, the advantage is near-optimal. In the case of t > 1, the advantage is optimal. Keywords : Hash function, Random oracle, Ideal cipher model.

• Type: Journal
• Year: 2008
• Where: IEICET
• Authors: Donghoon Chang, Mridul Nandi, Jesang Lee, Jaechul Sung, Seokhie Hong, Jongin Lim, Haeryong Park, Kilsoo Chun
• Keywords: Compression Function, Ideal Cipher Model, IEICET 2008, N-bit Output Size