[Cryptography] Is MD4 as secure as Poly1305 in an AEAD scheme?

Ryan Carboni ryacko at gmail.com
Thu Aug 27 15:04:40 EDT 2015


Is MD4 as secure as Poly1305 in an AEAD scheme?

I notice it consumes roughly the same amount of cycles, and any
forgery attempts would be nearly as difficult without knowledge of the
state of the MAC. Afterall, most AEAD schemes also encrypt the MAC
which essentially negate many attacks. I can't help but feel that MD4
is set to unfair standards while everything else is set to more
logical standards.


More information about the cryptography mailing list