Grøstl
Grøstl is a SHA-3 competition submission by Knudsen et al., a wide-pipe hash based on two AES-like permutations P and Q.
Purpose
A SHA-3 finalist providing a provable security bound and exploiting AES hardware acceleration.
Mechanism
Compression function h'=P(h⊕m)⊕Q(m)⊕h, where P and Q are wide variants of the AES round function (state 512/1024 bits). Merkle-Damgård + output transformation.
Use cases
- SHA-3 competition submission
- Provable security
- AES-based hash