On Fri, Jul 8, 2011 at 3:32 PM, David Miller [off-list ref] wrote:
So what is the cheapest non-linear function we could use?
I'm not comfortable giving cryptographic advice, but even + (addition
with carry) is nonlinear when combined with ^. However that seems
like the low-order bits might be too predictable.
Maybe * of hash key with a random odd value is good enough?
- R.