Re: [saag] AD sponsoring draft-josefsson-scrypt-kdf

On Thu, Aug 13, 2015 at 7:48 AM, Nikos Mavrogiannopoulos
<nmav@gnutls.org> wrote:
> On Thu, Aug 13, 2015 at 12:39 AM, Simon Josefsson <simon@josefsson.org> wrote:
>> DES-based UNIX Crypt-function,
>> FreeBSD MD5 crypt,
>> GNU SHA-256/512 crypt
>> Windows NT LAN Manager (NTLM) hash
>> Blowfish-based bcrypt
>
> The latter was published in USENIX 1999:
> https://www.usenix.org/legacy/event/usenix99/provos/provos.pdf
>
>> As far as I know, Salsa20 was not published at any conference or
>> journal, so there may not be any better references.
>
> Salsa20 was an official submission to estream competition, so the
> authoritative reference is the design articles at:
> http://www.ecrypt.eu.org/stream/salsa20pf.html (the "Salsa20
> specification" and "Salsa20 design").

I'd jut like to take a step back from the reference question to ask,
why is salsa used as a hash when it was designed as a stream cipher?
Is there a reason Blake2 (derived from chacha) was not used instead?
Maybe there is a good reason and I'd be interested to have that
background.

Thanks,
Kathleen

>
> regards,
> Nikos
>
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag

-- 

Best regards,
Kathleen