Why does Monero use keccak over something like sha-256?

Question

Keccak uses a sponge function which is cool but what benefits does keccak have over sha-256 for cryptography operations in the code? thanks

Daniel Ternyak · Accepted Answer · 2016-12-20T22:35:54.223

4

While Monero does not use Keccak for its hashing, one advantage of using CryptoNote is to prevent Monero from immediately being able to be mined by ASICs. There is tremendous investment in SHA-256 hashing because of Bitcoin's popularity, so using a less popular / more memory intensive standard allows Monero to be mined by the "common man"- at least until ASICs are developed.

edited Dec 20 '16 at 22:35

answered Dec 11 '16 at 00:11

Daniel Ternyak

450
3
10

score 3 · Answer 2 · answered Jan 14 '17 at 22:39

3

Keccak has "built-in" protection against length extension attacks.

Edit: spelling

answered Jan 14 '17 at 22:39

Lee Clagett

906
6
10

Why does Monero use keccak over something like sha-256?

2 Answers2