Ben Laurie <[EMAIL PROTECTED]> writes:
> OK, so if I've got a passphrase of arbitrary length, and I wish to
> condense it to make a key of length n bits (n > 160), what's the
> approved method(s) of doing that?
If you don't mind the limitation of 1k of internal state, then Panama
could be used directly; push in your salt and passphrase, padding to
the edge of the block with one followed by zeroes, then do 32 blank
pulls and start pulling out your key. If you want to do key
stretching, you could do more blank pulls before pulling out the key
(though this doesn't have the proven properties of the hash
construction of the key stretching paper).
I've been told there are results published against Panama (can anyone
give references?) but I think this demonstrates the flexibility of the
push-pull interface and it would be nice to have more designs that
offered it.
--
__
\/ o\ [EMAIL PROTECTED] *NOTE NEW EMAIL ADDRESS* \ /
/\__/ Paul Crowley http://www.cluefactory.org.uk/paul/ /~\
