This is great, thank you! This was on my wishlist for a few years:<p><a href="https://www.reddit.com/r/crypto/comments/7imejm/monthly_cryptography_wishlist_thread_december_2017/dr00e10/" rel="nofollow">https://www.reddit.com/r/crypto/comments/7imejm/monthly_cryp...</a><p>I've tried to take a stab at this problem, but was not sure if it worked at all:<p><a href="https://gist.github.com/dchest/50d52015939a5772497815dcd33a7983" rel="nofollow">https://gist.github.com/dchest/50d52015939a5772497815dcd33a7...</a><p>It's a modified BuzHash with the following changes:<p>- Substitution table is pseudorandomly permuted (NB: like Borg).<p>- Initial 32-bit state is derived from key.<p>- Window size slightly varies depending on key (by ~1/4).<p>- Digest is scrambled with a 32-bit block cipher.<p>I also proposed adding (unspecified) padding before encrypting chunks to further complicate discovering their plaintext lengths. Glad to see I was on the right track :)