Re: SHA-1 question

From: Paul Rubin (//phr.cx_at_NOSPAM.invalid)
Date: 03/11/04


Date: 10 Mar 2004 18:32:21 -0800

ggr@qualcomm.com (Gregory G Rose) writes:
> No? I find that very surprising. Given that there
> are essentially an infinite number of possible
> inputs, this would imply that something about the
> compression function makes particular outputs not
> only unlikely, but impossible. I'm unaware of any
> such result. Can you give pointers?

Oops, I misread the question. However, there aren't an infinite
number of possible inputs to the compression function. The total
number of possible inputs is 2**(512+160) which comes from the 512 bit
block size plus the 160 bits of chaining variables. These 512+160
bits uniquely determine the output. Yes, it's likely that all outputs
are covered. If the input is only 160 bits though (the part that I
mis-read), it's likely that some outputs don't occur.



Relevant Pages

  • Re: SHA-1 question
    ... However, there aren't an infinite ... >number of possible inputs to the compression function. ... If you consider SHA-1 as a prf mapping 160-bit ... Greg Rose ...
    (sci.crypt)
  • Re: factrial limit
    ... Any help with little explanation on how you got the ... what you are analyzing is the binomial coefficient for p+q things ... The limit as n,r tend to infinite depends on HOW they are ... (not surprising, since Pascal's triangle lists all the ...
    (sci.math)