The FISMA Focus IPD

The National Institute of Standards and Technology has selected the Keccak algorithm as the winner of a five-year competition to create a new Secure Hash Algorithm standard.

Keccak (pronounced “catch-ack”) is a little stronger and a little faster than the current SHA-2 standard algorithms and will become a candidate for the new federal SHA-3 standard. But NIST scientists say it is not intended as a replacement for SHA-2 — at least not for the foreseeable future — and they do not want to derail agencies’ use of the current standard.

NIST is in the process of moving away from the old SHA-1 hash algorithm, which is reaching its end-of-life, and requiring the use of SHA-2 in its place. Agencies should not wait to make that upgrade, thinking to leap-frogging to SHA-3, scientists warn.

“In current protocols there is not going to be any major push to move to SHA-3,” said Tim Polk, manager of NIST’s Computer Security Division’s Cryptographic Technology Group. “SHA-2 is a very good algorithm. For existing protocols in use today, SHA-2 is the way to go.”

A hash algorithm is a cryptographic tool that can create a digest, or string of bits of a specific length, for a digital document. The digest is unique to the message and can be used to verify that the contents of a digital document have not been altered. If a message is changed by a third party, the before and after digests produced by the hash algorithm no longer will match. Hash algorithms also can be used to create digital signatures.

Although NIST has a lot of faith in SHA-2, today, “when we started the competition, we had less confidence in SHA-2,” Polk said.

Back in 2007 cracks had begun to appear in the algorithms that collectively make up SHA-2 and it was decided to begin a competition for a new, stronger algorithm. But in the last five years the weaknesses did not develop as feared, and SHA-2 remains stronger today than expected.

“We know more now,” Polk said. And that is one of the advantages of running a public competition for a new secure algorithm. “We moved the state of the art forward in this area.”

The resilience of SHA-2 was not the only surprise. In NIST’s previous cryptographic competition, for the Advanced Encryption Standard, the winning algorithm was considerably stronger and faster than the predecessor 3DES. “We got everything we could have wanted,” Polk said.

But advances were not so great in the SHA-3 competition. “What was surprising is that we weren’t getting a big speed-up in performance across the board,” he said. “We couldn’t have predicted that at the time we started the competition.”