Does a linear cryptographic hash function exist?

325 views Asked by At

Does a linear cryptographic hash function exist?

By linear I mean a function 'f' such that:

enter image description here

enter image description here

where + is mod n for some large constant n

1

There are 1 answers

0
John Meacham On

Yes,the cryptographically strong SWIFFT algorithm (a variant was a condender for the SHA3 standard) is linear such that h(a + b) = h(a) + h(b)

It is an interesting example of a hash that is both cryptographically strong and not psuedorandom. It is also another unexpected use of the much lauded FFT algorithm.

http://en.wikipedia.org/wiki/SWIFFT