Non-trivial Black-Box Combiners for Collision-Resistant Hash-Functions Don't Exist

  • Authors:
  • Krzysztof Pietrzak

  • Affiliations:
  • CWI Amsterdam,

  • Venue:
  • EUROCRYPT '07 Proceedings of the 26th annual international conference on Advances in Cryptology
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

A (k,驴)-robust combiner for collision-resistant hash-functions is a construction which from 驴 hash-functions constructs a hash-function which is collision-resistant if at least kof the components are collision-resistant. One trivially gets a (k,驴)-robust combiner by concatenating the output of any 驴驴 k+ 1 of the components, unfortunately this is not very practical as the length of the output of the combiner is quite large. We show that this is unavoidable as no black-box (k,驴)-robust combiner whose output is significantly shorter than what can be achieved by concatenation exists. This answers a question of Boneh and Boyen (Crypto'06).