Certainty

[Paul Hoffman]

At 7:10 PM -0700 8/19/09, james hughes wrote:
>On Aug 19, 2009, at 3:28 PM, Paul Hoffman wrote:
>>I understand that "creaking" is not a technical cryptography term, but "certainly" is. When do we become "certain" that devastating attacks on one feature of hash functions (collision resistance) have any effect at all on even weak attacks on a different feature (either first or second preimages)?
>>
>>This is a serious question. Has anyone seen any research that took some of the excellent research on collision resistance and used it directly for preimage attacks, even with greatly reduced rounds?
>
>This is being done. What Perry said.


At 9:02 PM -0700 8/19/09, Greg Rose wrote:
>Not directly, as far as I know. But some research and success on preimages, yes.

Getting a straight answer on whether or not the recent preimage work is actually related to the earlier collision work would be useful.


--Paul Hoffman, Director
--VPN Consortium

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com