Re: [Mimblewimble] Switch to Blake2

2017-07-24 Thread Ignotus Peverell
Done. https://github.com/ignopeverell/grin/commit/01b66de4376c16f0880fa5a04e45e08b5fdbc981 - Igno > Original Message > Subject: Re: [Mimblewimble] Switch to Blake2 > Local Time: July 21, 2017 9:13 PM > UTC Time: July 21, 2017 9:13 PM > From: he...@ummj

Re: [Mimblewimble] Switch to Blake2

2017-07-21 Thread Jackson Palmer
+1 for blake2. Good adoption in other projects, addresses the need for speed. Cheers, Jackson. On Fri, Jul 21, 2017, at 01:49 PM, John Tromp wrote: > dear Igno, > > > So I'm considering a switch to the Blake2 [3] hash function. It's extremely > > fast in software (faster than SHA256 and even MD

Re: [Mimblewimble] Switch to Blake2

2017-07-21 Thread John Tromp
dear Igno, > So I'm considering a switch to the Blake2 [3] hash function. It's extremely > fast in software (faster than SHA256 and even MD5), has been shown to be as > secure as SHA3, was designed independently and has been widely reviewed. > > Any strong opposition or concerns? On the contrary.

Re: [Mimblewimble] Switch to Blake2

2017-07-21 Thread Ignotus Peverell
-tree implementation and SHA3 is completely dominating performance, in a bad way. I'd rather not being already limited by SHA3 in how fast we can add outputs to the sum tree. - Igno > Original Message > Subject: Re: [Mimblewimble] Switch to Blake2 > Local Time: Ju

Re: [Mimblewimble] Switch to Blake2

2017-07-21 Thread Oleg Andreev
s Blake2. Our > current SHA3 lib, tiny-keccak, doesn't even tests SHAKE and only supports > SHAKE128 with 128 bits outputs. We could improve that, but can't really > justify the extra effort. > I can email Zooko if I have questions :-) > - Igno > > >> --

Re: [Mimblewimble] Switch to Blake2

2017-07-21 Thread Ignotus Peverell
uestions :-) - Igno > Original Message ---- > Subject: Re: [Mimblewimble] Switch to Blake2 > Local Time: July 21, 2017 6:27 PM > UTC Time: July 21, 2017 6:27 PM > From: olega...@gmail.com > To: Ignotus Peverell > mimblewimble@lists.launchpad.net > My apologies for bike sheddin

Re: [Mimblewimble] Switch to Blake2

2017-07-21 Thread Oleg Andreev
My apologies for bike shedding, but have you considered SHAKE128? It uses the same Keccak function but with saner (faster) parameters and you use the extensible output for simpler generation of several blinding factors, forged elements etc. > On 21 Jul 2017, at 21:12, Ignotus Peverell > wrote

[Mimblewimble] Switch to Blake2

2017-07-21 Thread Ignotus Peverell
Hi all, I originally picked SHA3 (Keccak) for all hashing in grin [1]. The advantages of SHA3 over SHA256 are numerous (more modern design, less known weaknesses, designed independently from NSA, well studied and long review process, etc.) which motivated my original decision. However it turns o