Preimage Attacks on Step-Reduced MD5

  • Authors:
  • Yu Sasaki;Kazumaro Aoki

  • Affiliations:
  • NTT Information Sharing Platform Laboratories, NTT Corporation, , Tokyo, Japan 180-8585;NTT Information Sharing Platform Laboratories, NTT Corporation, , Tokyo, Japan 180-8585

  • Venue:
  • ACISP '08 Proceedings of the 13th Australasian conference on Information Security and Privacy
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper, we propose preimage attacks on step-reduced MD5. We show that a preimage of a 44-step MD5 can be computed to a complexity of 296. We also consider a preimage attack against variants of MD5 where the round order is modified from the real MD5. In such a case, a preimage of a 51-step round-reordered MD5 can be computed to a complexity of 296. Our attack uses "local collisions" of MD5 to create a degree of message freedom. This freedom enables us to match the two 128-bit intermediate values efficiently.