2026-07-20T14:48:21Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:1958 2024-03-06T11:08:31Z ddc:004 open_access

The Road from Panama to Keccak via RadioGatún Bertoni, Guido Daemen, Joan Peeters, Michaël Van Assche, Gilles Hash function cryptography In this presentation, we explain the design choices of Panama [1] and RadioGatun [2], which lead to Keccak [3]. After a brief recall of Panama, RadioGatun and the trail backtracking cost, we focus on three important aspects. First, we explain the role of the belt in the light of differential trails. Second, we discuss the relative advantages of a block mode hash function compared to a stream mode one. Finally, we point out why Panama and RadioGatun are not sponge functions and why their design philosophy differs from that of Keccak. [1] J. Daemen and C. S. K. Clapp, FSE 1998 [2] G. Bertoni et al., NIST Hash Workshop 2006 [3] G. Bertoni et al., SHA-3 submission, 2008 Schloss Dagstuhl – Leibniz-Zentrum für Informatik Guido Bertoni and Joan Daemen and Michaël Peeters and Gilles Van Assche 2009 Is Part Of Dagstuhl Seminar Proceedings, Volume 9031, Symmetric Cryptography (2009) InProceedings Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/DagSemProc.09031.17 urn:nbn:de:0030-drops-19587 https://drops.dagstuhl.de/entities/document/10.4230/DagSemProc.09031.17 eng https://creativecommons.org/licenses/by/4.0/legalcode