Uniform Compression Functions Can Fail to Preserve “Full” Entropy

Daniel R.  L.  Brown

Paper 2012/665

Uniform Compression Functions Can Fail to Preserve “Full” Entropy

Daniel R. L. Brown

Abstract

To have “full” entropy has been defined in a draft NIST standard to be to have min-entropy very close, proportionally, to the min-entropy of a uniform distribution. A function is uniform if all its preimages have the same size. This report proves that the output of any uniform compression function can fail to have full entropy, even when the input has full entropy.

Metadata

Available format(s): PDF
Category: Foundations
Publication info: Published elsewhere. Unknown where it was published
Keywords: Entropy random number generation
Contact author(s): dbrown @ certicom com
History: 2012-11-28: received
Short URL: https://ia.cr/2012/665
License: CC BY

BibTeX

@misc{cryptoeprint:2012/665,
      author = {Daniel R.  L.  Brown},
      title = {Uniform Compression Functions Can Fail to Preserve “Full” Entropy},
      howpublished = {Cryptology {ePrint} Archive, Paper 2012/665},
      year = {2012},
      url = {https://eprint.iacr.org/2012/665}
}