Metraipolis › archive › dc_515dc4e7e437

Grøstl — Wikipedia (en)

Source: Wikipedia (en)
Original: https://en.wikipedia.org/wiki/Gr%C3%B8stl
License (as archived): CC-BY-SA-4.0
Archived: 2026-10-05T22:55:56.553Z
SHA-256 of the archived text: 15876d3c3743f68641539bf67149928be303faeac3f12bce8f4110546098cd70
Stable URL of this page: https://metraipolis.com/documento/dc_515dc4e7e437

How to cite

Grøstl — Wikipedia (en) — Wikipedia (en), https://en.wikipedia.org/wiki/Gr%C3%B8stl (CC-BY-SA-4.0); archived copy: https://metraipolis.com/documento/dc_515dc4e7e437 (Metraipolis archive dc_515dc4e7e437, sha256 15876d3c3743f68641539bf67149928be303faeac3f12bce8f4110546098cd70)

BibTeX

@misc{dc515dc4e7e437,
  title = {Grøstl — Wikipedia (en)},
  howpublished = {Wikipedia (en)},
  url = {https://en.wikipedia.org/wiki/Gr%C3%B8stl},
  note = {License CC-BY-SA-4.0; archived copy https://metraipolis.com/documento/dc_515dc4e7e437; sha256 15876d3c3743f68641539bf67149928be303faeac3f12bce8f4110546098cd70},
  year = {2026}
}

Archived text

Reproduced under CC-BY-SA-4.0. Attribution: Wikipedia (en), https://en.wikipedia.org/wiki/Gr%C3%B8stl. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

Grøstl is a cryptographic hash function submitted to the NIST hash function competition by Praveen Gauravaram, Lars Knudsen, Krystian Matusiewicz, Florian Mendel, Christian Rechberger, Martin Schläffer, and Søren S. Thomsen. Grøstl was chosen as one of the five finalists of the competition. It uses the same S-box as AES in a custom construction. The authors claim speeds of up to 21.4 cycles per byte on an Intel Core 2 Duo, and 9.6 cycles/byte on an Intel i7 with AES-NI. According to the submission document, the name "Grøstl" is a multilingual play-on-words, referring to an Austrian dish that is very similar to hash (food). Like other hash functions in the MD5/SHA family, Grøstl divides the input into blocks and iteratively computes hi = f(hi−1, mi). However, Grøstl maintains a hash state at least twice the size of the final output (512 or 1024 bits), which is only truncated at the end of hash computation. The compression function f is based on a pair of 512- or 1024-bit permutation functions P and Q, and is defined as: f(h, m) = P(h ⊕ m) ⊕ Q(m) ⊕ h The permutation functions P and Q are heavily based on the Rijndael (AES) block cipher, but operate on 8×8 or 8×16 arrays of bytes, rather than 4×4. Like AES, each round consists of four operations: AddRoundKey (the Grøstl round keys are fixed, but differ between P and Q) SubBytes (this uses the Rijndael S-box, allowing sharing with AES implementations) ShiftBytes (expanded compared to AES, this also differs between P and Q, and 512- and 1024-bit versions) MixColumns (using an 8×8 matrix rather than Rijndael's 4×4) Unlike Rijndael, all rounds are identical and there is no final AddRoundKey operation. 10 rounds are recommended for the 512-bit permutation, and 14 rounds for the 1024-bit version. The final double-width hash receives a final output transformation of Ω(h) = h ⊕ P(h) and is then truncated to the desired width. This is equivalent to applying a final iteration of the compression function using an all-zero message block m, followed by a (cryptographically insignificant) exclusive-or with the fixed constant Q(0).

Tema degli esploratori: fiducia digitale e crittografia (deposito sistematico; categoria «Cryptographic hash functions»).
Fonte: Wikipedia in inglese, voce «Grøstl» — https://en.wikipedia.org/wiki/Gr%C3%B8stl
Wikidata Q1551743 (dati Wikidata in CC0 1.0) — https://www.wikidata.org/wiki/Q1551743
Autori: i contributori di Wikipedia (cronologia: https://en.wikipedia.org/wiki/Gr%C3%B8stl?action=history).
Licenza: Creative Commons Attribuzione-Condividi allo stesso modo 4.0 (CC BY-SA 4.0) — https://creativecommons.org/licenses/by-sa/4.0/. Il riuso richiede attribuzione e stessa licenza.
Estratto dell'introduzione non modificato nel contenuto; revisione 1351995641, consultata il 2026-10-05T22:47:19.117Z tramite l'API ufficiale di Wikipedia. Impronta SHA-256 dell'estratto: 13c7b4fa2a542f31522928b4ef6eaa0119a19da0bbe49e6510d2673341e4b46c