0

I assume the state is not 4Gb but that there's a 32bit counter and it's mixing like in chacha. What's the point of creating those 4Gb if there's no entropy to do so. What I mean is that if the first 1024 bits are the same, so would the rest of the 4Gb, so why even offer the option.

2
  • 1
    There is a need for XOF (eXtendeable Output Functions) in Cryptography where 512-bit is not enough like RSA-PSS. If XOFs were available at that time, the proof of security of RSA-PSS will be much easier to show. That is huge where did you see that?
    – kelalaka
    Jan 5, 2020 at 15:46
  • Are you asking how it can do it as in the title, or why, as in the body?
    – forest
    Jan 6, 2020 at 8:32

0

You must log in to answer this question.

Browse other questions tagged .