[Cryptography] NIST about to weaken SHA3?

James A. Donald jamesd at echeque.com
Mon Sep 30 17:21:03 EDT 2013

On 2013-10-01 00:44, Viktor Dukhovni wrote:
> Should one also accuse ESTREAM of maliciously weakening SALSA?  Or
> might one admit the possibility that winning designs in contests
> are at times quite conservative and that one can reasonably
> standardize less conservative parameters that are more competitive
> in software?

"less conservative" means weaker.

Weaker in ways that the NSA has examined, and the people that chose the 
winning design have not.

Why then hold a contest and invite outside scrutiny in the first place.?

This is simply a brand new unexplained secret design emerging from the 
bowels of the NSA, which already gave us a variety of backdoored crypto.

The design process, the contest, the public examination, was a lie.

Therefore, the design is a lie.

More information about the cryptography mailing list