Following-up to my own post to correct a goof: On Wed, Oct 13, 2010 at 10:56 PM, Zooko O'Whielacronx <[email protected]> wrote: > > If a hash has 32-bit pre-image-resistance then this means an attacker > might spend about 2^32 resources to find a pre-image. > > If a hash has 64-bit pre-image-resistance then this means an attacker > might spend about 2^64 resources to find a pre-image. > > What if a hash has 512-bit collision-resistance?
I originally wrote this letter in terms of collision-resistance, and then changed it to be in terms of pre-image resistance, and missed a spot when editing. There's no intended meaning in the switch from pre-image resistance to collision-resistance above--I intended it to be pre-image resistance all the way. I know that collision resistance is approximately as difficult to achieve as the square of pre-image resistance is. Also I know that there is no planned SHA-3 standard for a hash function with 512-bit collisionresistance. Sorry for the confusion. Regards, Zooko Wilcox-O'Hearn _______________________________________________ cryptography mailing list [email protected] http://lists.randombit.net/mailman/listinfo/cryptography
