1
vote
Can you unwind a cryptographic hash function's last round?
Nope. As a trivial case, imagine if C were one bit long. If telling you the last bit of the input was enough to make it easy to invert the hash (or find a pre-image), then I could simply try both ...
D.W.♦
- 159k
Only top scored, non community-wiki answers of a minimum length are eligible