@node en341194
@section GOST R 34.11-94

@table @asis
@item Algorithm type
    Hash function
@item Digest size
    256 bit
@item Blocksize
    256 bit
@item Structure
    Merkle-Damgård
@item Rounds
    32
@item RFC
    @url{https://tools.ietf.org/html/rfc5831.html, 5831}
@item Best attack
    @itemize
    @item Collisions: complexity 2@sup{105}
    @item Preimage: complexity 2@sup{192}
    @end itemize
@item Wikipedia
    @url{https://en.wikipedia.org/wiki/GOST_(hash_function), article}
@end table

@strong{Features}:
@itemize
@item Uses @ref{en2814789, GOST 28147-89} block cipher inside.
@item You have to specify S-box to use for that block cipher.
@item Standard does not define how digest output must be presented --
that is why there are incompatible implementations, that output digest
as either little-endian or big-endian value.
@end itemize

@strong{Implementations}: @ref{341194Impl, here}.