SHA-3 Standard [pdf]

#1

Post by dchest » Wed, Aug 05, 2015, 3:10 PM UTC

SHA-3 Standard [pdf]
nvlpubs.nist.gov

Re: SHA-3 Standard [pdf]

#2

Post by dchest » Wed, Aug 05, 2015, 3:11 PM UTC

Released today.

Here are responses to draft comments: https://www.federalregister.gov/articles/2015/08/05/2015-191...

Re: SHA-3 Standard [pdf]

#3

Post by AceJohnny2 » Wed, Aug 05, 2015, 5:23 PM UTC

This was the result of the contest in 2012, commented by Bruce Schneier here: https://www.schneier.com/cgi-bin/mt/mt-search.cgi?search=SHA...

Re: SHA-3 Standard [pdf]

#4

Post by AceJohnny2 » Wed, Aug 05, 2015, 5:24 PM UTC

Anyone have a VHDL or Verilog implementation of this? :)

For that matter, I haven't looked at the algorithm. Is it readily implementable in hardware?

Re: SHA-3 Standard [pdf]

#5

Post by logicrime » Wed, Aug 05, 2015, 5:38 PM UTC

For non-scientists, what does this mean? Is SHA-2 not good anymore? What should I do?

Re: SHA-3 Standard [pdf]

#6

Post by fortytw2 » Wed, Aug 05, 2015, 5:43 PM UTC

logicrime wrote: post #5

For non-scientists, what does this mean? Is SHA-2 not good anymore? What should I do?

SHA-2 is still dandy - If I understand correctly SHA-3 is in an entirely different family of cryptographic hash functions, so that if/when a problem is discovered with SHA-2 there's another standard approved and ready to go - but that doesn't mean SHA-3 can't be used now.

Re: SHA-3 Standard [pdf]

#7

Post by tptacek » Wed, Aug 05, 2015, 5:45 PM UTC

logicrime wrote: post #5

For non-scientists, what does this mean? Is SHA-2 not good anymore? What should I do?

SHA-2 is fine, and in fact the more conservative choice right now. SHA-3 didn't happen because SHA-2 was threatened.

My current favorite conservative hash choice is SHA512/256, which is the SHA-2 that generates a 512-bit output but truncates it to 256. It gives you the same length extension protection that is the most important feature of SHA-3, and is available in most libraries already.

I have never recommended to anyone that they switch from SHA-2 to SHA-3. I'm actually in "wait and see" mode about SHA-3; there are compelling other hashes available if you want to be ultra-modern about which hash you use.

Re: SHA-3 Standard [pdf]

#8

Post by infinity0 » Wed, Aug 05, 2015, 5:47 PM UTC

If I were the NSA, how would I backdoor this?

Re: SHA-3 Standard [pdf]

#9

Post by pshc » Wed, Aug 05, 2015, 5:50 PM UTC

Whoa, finally! I've been oddly attached to Keccak's story over the years ever since it won the contest. Glad to see SHA-3 finished.

Did NIST make any changes to the algorithm since? From what I can tell it looks like they only made clarifications.

To celebrate, here's a hacked-up keccak-512 implementation in Rust: https://github.com/pshc/keccak (I have yet to check whether it's actually SHA-3.)

Re: SHA-3 Standard [pdf]

#10

Post by alextgordon » Wed, Aug 05, 2015, 5:51 PM UTC

logicrime wrote: post #5

For non-scientists, what does this mean? Is SHA-2 not good anymore? What should I do?

IMO, the outstanding result of the SHA3 competition was not Keccak but BLAKE. BLAKE2 is the best hash function around: https://blake2.net