Tag
collision-resistance
- Jun 2, 2026 The Merkle-Damgård Construction and the Padding That Binds It How a fixed-width compression function is iterated into a variable-length hash, why the padding encodes the message length, and which attacks the iteration rule leaves open. cryptography
- Jan 7, 2024 Collision Resistance and the Birthday Bound Why a hash needs roughly twice the output bits of the security level it claims, how the three resistance notions differ, and where the generic attacks stop applying. cryptography