hi.
The reason i need ME2 is i want to bring a real nonlinear function and the ANFs have many monomials. Someone may think that functions like ME1 is nonlinear function. but i do not think so, bij
Forum: 2007 Reports
when i write the paper, i know this.
1, i get the idea at september, complete it at october. i had not think over all thing.
2, even we can find "collide" for ME2, but the system has function G, R.
Forum: 2007 Reports
2007/476: Dynamic SHA has weak expansion ME2
Note that the expansion ME2 is weak.
(i) Dynamic SHA-224/256:
For every message block M = M[0], ..., M[15], where (M[0] xor M[1]...xor M[7] = 0xfedc
Forum: 2007 Reports