[Cryptography] Name for a specific type of preimage resistance

Michael Kjörling 9bf3a7ef93bb at ewoof.net
Fri Dec 9 06:59:00 EST 2022


On 8 Dec 2022 12:35 +0000, from pgut001 at cs.auckland.ac.nz (Peter Gutmann):
> Is there a name for this special-case preimage attack, find the one preimage
> that contains the secret value, to distinguish it from a generic preimage
> attack, find any preimage?

Isn't that simply first and second preimage resistance, respectively?

First preimage resistance being the difficulty of finding some value x
such that h(x) = y for a given y; second preimage resistance being the
difficulty of finding two values x ≠ x' such that h(x) = h(x').

-- 
✍  Michael Kjörling                  🏡 https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”



More information about the cryptography mailing list