Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Ok but, in reply to that tweet, one point keccak.team make, which seems valid for non-classified cryptanalysis, is that researchers don't invest time in trying to analyse ARX because the propagation of addition makes it too complicated.

One thing I got from that is that ARX designs are less likely to be broken, not because they are necessarily more secure, but because ARX is often less analysed than designs which yield more concise mathematical representations.



I think there's an implication here of "less likely to be broken by public research".


Exactly, ARX's less analyzed complexity is a potential information asymmetry arbitrage for serious attackers.


That would be getting causality backwards.


I have no idea what you mean.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: