Viewing profile — nincompope

> More progress has been made against conventional multiplicative group Diffie-Hellman than has against curves. How is "none" more than "none"?

It's arguable that SHA-3 is better understood than SHA-2, at least in the open research community. The rationales behind every component of SHA-3 are well documented, and the desig…

As far as I can tell, the increase from 18 to 24 rounds was not NIST's call, but due to the zero-sum distinguishers found on Keccak-f, which made it no longer "hermetic": http://ke…