Seems like XOR is better for approximating a random oracle, and appending is (ne...

ziedaniel1 on Aug 6, 2015 | parent | context | favorite | on: SHA-3 Standard [pdf]

Seems like XOR is better for approximating a random oracle, and appending is (negligibly) better for ensuring collision resistance. People often are not clear about which of these two very different properties they actually want out of a hash.