Are HAIFA-construction based hash functions (e.g. Argon2) resistant to length-extension attacks?

Question

Would a HAIFA-construction based hash function like Argon2 resistant to length-extension attacks?

I say that Argon2 is HAIFA-based because BLAKE is, and Argon2 is based on BLAKE.

I've unified the title and body on the answer's yes. – kelalaka Oct 15 '19 at 08:54 — kelalaka, Oct 15 '19 at 08:54

score 2 · Accepted Answer · answered Oct 15 '19 at 07:30

2

Yes.

The HAIFA construct as introduced in A Framework for Iterative Hash Functions - HAIFA by Eli Biham and Orr Dunkelman is proposed with the explicit goal of eliminating various pitfalls of the classic Merkle-Damgaard construct.

answered Oct 15 '19 at 07:30

DannyNiu

1 Answers1