Struct GroestlDigestCompression

pub struct GroestlDigestCompression<F: BinaryField + From<AESTowerField8b> + Into<AESTowerField8b>> { /* private fields */ }

A compression function for Grøstl hash digests based on the Grøstl output transformation.

This is a 512-bit to 256-bit compression function. This does not apply the full Grøstl hash algorithm to a 512-bit input. Instead, this compression function applies just the Grøstl output transformation, which is believed to be one-way and collision-resistant.

Security justification

The Grøstl output transformation in Grøstl Section 3.3 is argued to be one-way and collision-resistant in multiple ways. First, in Section 4.6, the authors argue that the output transformation is an instance of the Matyas-Meyer-Oseas construction followed by a truncation. Second, in Section 5.1, the authors show that the output transformation is a call to the 1024-to-512-bit compression function on a 0-padded input followed by an XOR with a constant and a truncation.

Trait Implementations

impl<F: Clone + BinaryField + From<AESTowerField8b> + Into<AESTowerField8b>> Clone for GroestlDigestCompression<F>

fn clone(&self) -> GroestlDigestCompression<F>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<F: Debug + BinaryField + From<AESTowerField8b> + Into<AESTowerField8b>> Debug for GroestlDigestCompression<F>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<F: Default + BinaryField + From<AESTowerField8b> + Into<AESTowerField8b>> Default for GroestlDigestCompression<F>

fn default() -> GroestlDigestCompression<F>

Returns the “default value” for a type.

impl<F> PseudoCompressionFunction<<ScaledUnderlier<M128, 2> as PackScalar<F>>::Packed, 2> for GroestlDigestCompression<F>

where OptimalUnderlier256b: PackScalar<F> + Divisible<F::Underlier>, F: BinaryField + From<AESTowerField8b> + Into<AESTowerField8b>,

fn compress(&self, input: [GroestlDigest<F>; 2]) -> GroestlDigest<F>

impl<F> CompressionFunction<<ScaledUnderlier<M128, 2> as PackScalar<F>>::Packed, 2> for GroestlDigestCompression<F>

where OptimalUnderlier256b: PackScalar<F> + Divisible<F::Underlier>, F: BinaryField + From<AESTowerField8b> + Into<AESTowerField8b>,