<?xml version="1.0" encoding="iso-8859-1"?>
<?xml-stylesheet href="paper.xsl" type="text/xsl"?>

<paper xmlns="http://www.cse.ucsd.edu/daniele/XML">

  <filename>SWIFFT</filename>

  <title>SWIFFT: a modest proposal for FFT hashing</title>


  <author>Vadim Lyubashevsky</author>
  <author>Daniele Micciancio</author>
  <author>Chris Peikert</author>
  <author>Alon Rosen</author>

  <reference>
    <conference>Fast Software Encryption</conference>
    <conf href="http://fse2008.epfl.ch/">FSE 2008</conf>
    <address>Lausanne, Switzerland</address>
    <year>2008</year>
    <month>2</month>
    <pages>54-72</pages>
    <volume>5086</volume>
    <doi>10.1007/978-3-540-71039-4_4</doi>
  </reference>

  <abstract>
    <p xmlns="http://www.w3.org/1999/xhtml">
      We propose SWIFFT, a collection of compression functions that are
      highly parallelizable and admit very efficient implementations on
      modern microprocessors.  The main technique underlying our functions
      is a novel use of the <em>Fast Fourier Transform</em> (FFT) to achieve
      "diffusion," together with a linear combination to achieve
      compression and "confusion."  We provide a detailed security
      analysis of concrete instantiations, and give a high-performance
      software implementation that exploits the inherent parallelism of the
      FFT algorithm.  The throughput of our implementation is competitive
      with that of SHA-256, with additional parallelism yet to be exploited.
      
      Our functions are set apart from prior proposals (having comparable
      efficiency) by a supporting asymptotic <em>security proof</em>: 
      it can be formally proved that finding a collision in a randomly-chosen
      function from the family (with noticeable probability) is at least as
      hard as finding short vectors in cyclic/ideal lattices in the
      <em>worst case</em>.
    </p>
  </abstract>
</paper>
