Ciphers And Codes
To begin with, no one really thinks that NIST blew it right here. All of the finalists were sturdy designs, and each offers a substantial safety margin over the previous state of the art. Concretely, this means no extra length-extension attacks as in SHA1/2, although admittedly some SHA2 variantsandnbsp;already satisfy this requirement. Of course, you…