Re: Conjectured pseudorandom functions
From: David Wagner (daw_at_taverner.cs.berkeley.edu)
Date: 04/30/05
- Next message: Bryan Olson: "Re: AES is not a group"
- Previous message: mike: "Re: Unique number generation"
- In reply to: daidar3118_at_hotmail.com: "Conjectured pseudorandom functions"
- Next in thread: daidar3118_at_hotmail.com: "Re: Conjectured pseudorandom functions"
- Reply: daidar3118_at_hotmail.com: "Re: Conjectured pseudorandom functions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 30 Apr 2005 03:44:08 +0000 (UTC)
>What are the conjectured pseudorandom functions with arbitrary input
>length commonly used in practice?
SHA1-HMAC is a good example. AES-OMAC is another.
>Is it necessary to choose the key of
>a pseudorandom function uniformly from the key space in order to ensure
>its randomness?
For most of these PRFs, yes.
>Could we just feed the output of the pseudorandom
>function on an input x as the key to another pseudorandom function?
Assuming you mean F(F(k,x), y), the answer is basically yes,
depending on what you want to do with it and what you want to
achieve with this construction. Do you want to elaborate?
- Next message: Bryan Olson: "Re: AES is not a group"
- Previous message: mike: "Re: Unique number generation"
- In reply to: daidar3118_at_hotmail.com: "Conjectured pseudorandom functions"
- Next in thread: daidar3118_at_hotmail.com: "Re: Conjectured pseudorandom functions"
- Reply: daidar3118_at_hotmail.com: "Re: Conjectured pseudorandom functions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]