
Hash functions 287
ShiftBytes. Each row of the current state A is rotated left by a fixed amount;
of the eight rows (indexed 0 to 7), row i is rota ted left by i pla c e s.
MixBytes. This is a matrix product using the Rijndael field
Z
2
[x]/(x
8
+ x
4
+ x
3
+ x + 1)
and where the state A is replaced by BA, with B be ing defined a s
B =
02 02 03 04 05 03 05 07
07 02 02 03 04 05 03 05
05 07 02 02 03 04 05 03
03 05 07 02 02 03 04 05
05 03 05 07 02 02 03 04
04 05 03 05 07 02 02 03
03 04 05 03 05 07 02 02
02 03 04 05 03 05 07 02
.
The initial value IV is fix e d, and for Grøs tl-256 it consists of 32 bytes, where
all bytes are zero except for the second ...