GOST R 34.11-2012: Hash Function
RFC 6986

• Status
• IESG evaluation record
• IESG writeups
• Email expansions
• History

• Versions
• 00
• 01

Independent Submission                                  V. Dolmatov, Ed.
Request for Comments: 6986                                  A. Degtyarev
Updates: 5831                                            Cryptocom, Ltd.
Category: Informational                                      August 2013
ISSN: 2070-1721

                    GOST R 34.11-2012: Hash Function

Abstract

   This document is intended to be a source of information about the
   Russian Federal standard hash function (GOST R 34.11-2012), which is
   one of the Russian cryptographic standard algorithms (called GOST
   algorithms).  This document updates RFC 5831.

Status of This Memo

   This document is not an Internet Standards Track specification; it is
   published for informational purposes.

   This is a contribution to the RFC Series, independently of any other
   RFC stream.  The RFC Editor has chosen to publish this document at
   its discretion and makes no statement about its value for
   implementation or deployment.  Documents approved for publication by
   the RFC Editor are not a candidate for any level of Internet
   Standard; see Section 2 of RFC 5741.

   Information about the current status of this document, any errata,
   and how to provide feedback on it may be obtained at
   http://www.rfc-editor.org/info/rfc6986.

Copyright Notice

   Copyright (c) 2013 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.

Dolmatov & Degtyarev          Informational                     [Page 1]
RFC 6986            GOST R 34.11-2012: Hash Function         August 2013

Table of Contents

   1. Scope ...........................................................2
   2. General Information .............................................3
   3. Standard References .............................................3
   4. Definitions and Notations .......................................4
      4.1. Definitions ................................................4
      4.2. Notations ..................................................5
   5. General Provisions ..............................................6
   6. Parameter Values ................................................6
      6.1. Initializing Values ........................................6
      6.2. Nonlinear Bijections of Binary Vector Sets .................7
      6.3. Byte Permutation ...........................................8
      6.4. Linear Transformations of Binary Vector Sets ...............8
      6.5. Iteration Constants ........................................9
   7. Transformations ................................................10
   8. Round Functions ................................................11
   9. Hash-Function Calculation Procedure ............................11
   10. Examples (Informative) ........................................13
      10.1. Example 1 ................................................13
           10.1.1. For Hash Function with 512-Bit Hash Code ..........13
           10.1.2. For Hash Function with 256-Bit Hash Code ..........19
      10.2. Example 2 ................................................25
           10.2.1. For Hash Function with 512-Bit Hash Code ..........25
           10.2.2. For Hash Function with 256-Bit Hash Code ..........32
   11. Security Considerations .......................................38
   12. References ....................................................38
      12.1. Normative References .....................................38
      12.2. Informative References ...................................39

1.  Scope

   The Russian Federal standard hash function (GOST R 34.11-2012)
   establishes the hash-function algorithm and the hash-function
   calculation procedure for any sequence of binary symbols used in
   cryptographic methods of information processing and information
   security, including techniques for providing data integrity and
   authenticity and for digital signatures during information transfer,
   information processing, and information storage in computer-aided
   systems.

   The hash function defined in the standard provides for the operation
   of digital signature systems using the asymmetric cryptographic
   algorithm in compliance with GOST R 34.10-2012 [GOST3410-2012].

Dolmatov & Degtyarev          Informational                     [Page 2]
RFC 6986            GOST R 34.11-2012: Hash Function         August 2013

   GOST R 34.11-2012 applies to the creation, operation, and
   modernization of information systems of different purpose.

   GOST R 34.11-94 is superseded by GOST R 34.11-2012 from 1st January
   2013.  That means that all new systems that are presented for