Re: Constructing a random permutation on the fly
- From: Paul Rubin <http://phr.cx@xxxxxxxxxxxxxx>
- Date: 10 Jun 2009 08:42:29 -0700
Ilmari Karonen <usenet2@xxxxxxxxxxxxxx> writes:
As for the number of rounds, there's a well-known result by Luby and
Rackoff saying that four rounds are enough (even for crypto purposes,
which your use case isn't) if your round function is random enough.
No, 4 rounds isn't enough for short word sizes like this, where the
probability of collision is non-negligible. I remember some paper
saying 7 rounds was enough but I don't remember the reason. I usually
use 10 or so rounds when I do stuff like this, but it's also been on
slightly larger inputs.
.
- References:
- Constructing a random permutation on the fly
- From: Tom Anderson
- Re: Constructing a random permutation on the fly
- From: Paul Rubin
- Re: Constructing a random permutation on the fly
- From: Ilmari Karonen
- Constructing a random permutation on the fly
- Prev by Date: Re: Constructing a random permutation on the fly
- Next by Date: Re: Constructing a random permutation on the fly
- Previous by thread: Re: Constructing a random permutation on the fly
- Next by thread: Re: Constructing a random permutation on the fly
- Index(es):
Relevant Pages
|