A New Paradigm for Collision-Free Hashing: Incrementality at Reduced Cost

摘要

We present a simple, new paradigm for the design of collision-free hash functions. Any function emantting from this paradigm is incremental. (This means that if a message x which I have previously hashed is modified to X~' then rather than having to re-compute the hash of X~' from scratch, I can quickly "update" the old hash value to the new one, in time proportional to the amount of modification made in x to get x~'.) Also any function emanating from this paradigm is aprallelizable, useful for hardware implementation. We derive several specific functions from our paradigm. All use a standard hash function, assumed ideal, and some algebraic operations. The first function, MuHASH, uses one modular multiplication per block of the message, making it reasonably efficient, and significantly faster than previous incremental hash functions. Its security is proven, based on the hardness of the discrete logarithm problem. A second function, AdHASH, is even faster, using additions instead of multipliscations, with security proven given either that approximation of the length of shortest lattice vectors is hard or that the weighted subset sum problem is hard. A third function, LtHASH, is a practical variant of recent lattice based functions, with security proven base,d again o nthe hardness of shortest lattice vector approximation.