- In Symmetric Cryptography, Dagstuhl Seminar Proceedings (2009)
Abstract
In this paper, we explain the design choices of Panama and RadioGatún, which lead to Keccak. After a brief recall of Panama, RadioGatún and the trail backtracking cost, we focus on three important aspects. First, we explain the role of the belt in the light of differential trails. Second, we discuss the relative advantages of a block mode hash function compared to a stream mode one. Finally, we point out why Panama and RadioGatún are not sponge functions and why their design philosophy differs from that of Keccak.