Publications
Withdrawn on December 15, 2022.
Randomized Hashing for Digital Signatures
Documentation
Topics
Date Published: February 2009
Planning Note (12/15/2022):
After two public comment periods and an internal review by NIST's Crypto Publication Review Board, NIST SP 800-106 has been withdrawn.
Author(s)
Quynh Dang (NIST)
NIST-approved digital signature algorithms require the use of an approved cryptographic hash function in the generation and verification of signatures. Approved cryptographic hash functions and digital signature algorithms can be found in FIPS 180-3, Secure Hash Standard (SHS), and FIPS 186-3, Digital Signature Standard (DSS), respectively. The security provided by the cryptographic hash function is vital to the security of a digital signature application. This Recommendation specifies a method to enhance the security of the cryptographic hash functions used in digital signature applications by randomizing the messages that are signed.
NIST-approved digital signature algorithms require the use of an approved cryptographic hash function in the generation and verification of signatures. Approved cryptographic hash functions and digital signature algorithms can be found in FIPS 180-3, Secure Hash Standard (SHS), and FIPS 186-3,...
See full abstract
NIST-approved digital signature algorithms require the use of an approved cryptographic hash function in the generation and verification of signatures. Approved cryptographic hash functions and digital signature algorithms can be found in FIPS 180-3, Secure Hash Standard (SHS), and FIPS 186-3, Digital Signature Standard (DSS), respectively. The security provided by the cryptographic hash function is vital to the security of a digital signature application. This Recommendation specifies a method to enhance the security of the cryptographic hash functions used in digital signature applications by randomizing the messages that are signed.
Hide full abstract
Keywords
cryptographic hash function; hash function; collision resistance; digital signature; randomized hashing
Control Families
Identification and Authentication; System and Communications Protection; System and Information Integrity
