On: Design of a silicon quantum computer chip

[rocqua]

Does the same hold for hashes based non on Merkle-Damgard but the sponge construction?

[zamalek → rocqua]

It looks like we don't know, excluding some very specific sponge functions, based on some quick research.[1][2]

[1]: https://eprint.iacr.org/2017/771.pdf [2]: https://crypto.stackexchange.com/questions/419/what-security... (NB: comments)