SMASH is acryptographic hash function which was created byLars R. Knudsen.^[3] SMASH comes in two versions: 256-bit and 512-bit. Each version was supposed to rivalSHA-256 andSHA-512, respectively, however, shortly after the SMASH presentation atFSE 2005, an attack vector against SMASH was discovered which left the hash broken.

The message length was limited to less than 2¹²⁸ for SMASH-256 and 2²⁵⁶ for SMASH-512.

Input: 256/512-bit message blocks${\displaystyle m_1,m_2,...,m_t}$ and${\displaystyle \theta \in GF(2^n)}$

• ${\displaystyle h_0=f(iv)\oplus iv}$
• ${\displaystyle h_i=h(h_{i-1},m_i)=f(h_{i_1}\oplus m_i)\oplus m_i\oplus \theta m_i}$
• ${\displaystyle h_{t+1}=f(h_t)\oplus h_t}$

The function f is a complex compression function consisting of H-Rounds and L-Rounds usingS-boxes,linear diffusion and variable rotations, details can be found here^[3]

TheS-boxes in SMASH are derived versions from theSerpent ones.

This cryptography-related article is astub. You can help Wikipedia byadding missing information.

• v
• t
• e

• Cryptographic hash functions
• Cryptography stubs

• All stub articles