SAI-288

9-state, 64 rounds per 72-byte block.

State: 9 × 32 bits.

Input: 576 bits.

Output: 288 bits.

IV:

0x243F6A88, 0x85A308D3, 0x13198A2E, 0x03707344,

0xA4093822, 0x299F31D0, 0x082EFA98, 0xEC4E6C89, 0x452821E6

Round t ∈ [0, 63] on M₀ … M₁₇:

f1(t) = (S[(t+1) mod 9] XOR M[t mod 18])

        + γ^(t/R) * τ * Σ(S[j] * φ^j, j=0..min(t,8))

        XOR ROTL(S[(t+4) mod 9], floor(φ*t) mod 32)

f2(t) = (S[(t+5) mod 9] + M[floor(t*φ) mod 18])

        XOR ROTR(S[(t+7) mod 9], t mod 29)

S[t mod 9] ← (f1 + f2 + S[t mod 9]) mod 2^32

Lemma:

Collision: 2¹⁴⁴ evaluations.

Preimage: 2²⁸⁸ operations.

This is only for Syamailcoin or any new Coin with the Syamailcoin format, I am faced with 47 critical questions before starting with technical questions anyway and I didn't get any benefit.

Anyone can test SAI-288 and if there are any errors, please let me know, but if there is none, you can implement this and help me to code Syamailcoin or Coding your new coin in Syamailcoin format.