Standard for Second Preimage Resistant Hash Functions

Asked Jan 27 '21 at 20:16

Active Jan 27 '21 at 21:44

Viewed 94 times

Some PQC schemes don't require collision resistance for their hash functions, thus using a hash function faster than the SHA series that only considers the pre-image and secondary pre-image resistance would speed up these schemes.

Is there such a standard for hash functions that 1st and 2nd preimage resistant but not necessarily collision resistant?

edited Jan 27 '21 at 21:44

kelalaka

48,443
11
116
196

asked Jan 27 '21 at 20:16

user86443

1

Not clear what you are asking? However, see Why does NIST say that 2nd preimage resistance depends on the message length – kelalaka Jan 27 '21 at 20:26
Im asking if ONLY 2nd preimage resistant hash functions exist, which, due to their 2nd preimage security only, are faster than SHA-2/3. Some pqc schemes dont require collision resistance for thei hash functions, thus using a faster than SHA2~ scheme would speed up these schemes – user86443 Jan 27 '21 at 20:29
BLAKE2 is one of the fastest. And a better question should be included at least the names of these PQC schemes. Note that, hash functions are designed for collision resistance. – kelalaka Jan 27 '21 at 20:35
1

I guess the question is if you can create one that doesn't have collision resistance but is faster. I guess you could e.g. halve the state / output. – Maarten Bodewes Jan 27 '21 at 21:04
Ok, I took the liberty to edit your question. Could you check it? – kelalaka Jan 27 '21 at 21:45

Standard for Second Preimage Resistant Hash Functions

0 Answers0