[146558] in cryptography@c2.net mail archive
Re: [Cryptography] Hashes into Ciphers
daemon@ATHENA.MIT.EDU (Ben Laurie)
Wed Sep 4 13:12:12 2013
X-Original-To: cryptography@metzdowd.com
In-Reply-To: <20130904104933.23b2ddd6@jabberwock.cb.piermont.com>
Date: Wed, 4 Sep 2013 16:42:24 +0100
From: Ben Laurie <ben@links.org>
To: "Perry E. Metzger" <perry@piermont.com>
Cc: =?ISO-8859-1?Q?Far=E9?= <fahree@gmail.com>,
Cryptography Mailing List <cryptography@metzdowd.com>,
radix42@gmail.com, Richard Salz <rich.salz@gmail.com>
Errors-To: cryptography-bounces+crypto.discuss=bloom-picayune.mit.edu@metzdowd.com
--===============3072706417027352289==
Content-Type: multipart/alternative; boundary=001a11c2c338e03bc304e590a6a2
--001a11c2c338e03bc304e590a6a2
Content-Type: text/plain; charset=ISO-8859-1
On 4 September 2013 15:49, Perry E. Metzger <perry@piermont.com> wrote:
> On Wed, 4 Sep 2013 10:37:12 -0400 "Perry E. Metzger"
> <perry@piermont.com> wrote:
> > Phil Karn described a construction for turning any hash function
> > into the core of a Feistel cipher in 1991. So far as I can tell,
> > such ciphers are actually quite secure, though impractically slow.
> >
> > Pointers to his original sci.crypt posting would be appreciated, I
> > wasn't able to find it with a quick search.
>
> Answering my own question
>
>
> https://groups.google.com/forum/#!original/sci.crypt/tTWR2qIII0s/iDvT3ptY5CEJ
>
> Note that Karn's construction need not use any particular hash
> function -- he's more or less simply describing how to use a hash
> function of any sort as the heart of a Feistel cipher.
>
His claim is that it is actually faster than DES, not impractically slow.
--001a11c2c338e03bc304e590a6a2
Content-Type: text/html; charset=ISO-8859-1
<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On 4 September 2013 15:49, Perry E. Metzger <span dir="ltr"><<a href="mailto:perry@piermont.com" target="_blank">perry@piermont.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Wed, 4 Sep 2013 10:37:12 -0400 "Perry E. Metzger"<br>
<<a href="mailto:perry@piermont.com">perry@piermont.com</a>> wrote:<br>
> Phil Karn described a construction for turning any hash function<br>
> into the core of a Feistel cipher in 1991. So far as I can tell,<br>
> such ciphers are actually quite secure, though impractically slow.<br>
><br>
> Pointers to his original sci.crypt posting would be appreciated, I<br>
> wasn't able to find it with a quick search.<br>
<br>
Answering my own question<br>
<br>
<a href="https://groups.google.com/forum/#!original/sci.crypt/tTWR2qIII0s/iDvT3ptY5CEJ" target="_blank">https://groups.google.com/forum/#!original/sci.crypt/tTWR2qIII0s/iDvT3ptY5CEJ</a><br>
<br>
Note that Karn's construction need not use any particular hash<br>
function -- he's more or less simply describing how to use a hash<br>
function of any sort as the heart of a Feistel cipher.<br></blockquote><div><br></div><div>His claim is that it is actually faster than DES, not impractically slow.</div><div><br></div></div></div></div>
--001a11c2c338e03bc304e590a6a2--
--===============3072706417027352289==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
The cryptography mailing list
cryptography@metzdowd.com
http://www.metzdowd.com/mailman/listinfo/cryptography
--===============3072706417027352289==--
