Collisions for RC4-Hash

  • Authors:
  • Sebastiaan Indesteege;Bart Preneel

  • Affiliations:
  • Department of Electrical Engineering ESAT/SCD-COSIC, Katholieke Universiteit Leuven, Heverlee, Belgium B-3001 and Interdisciplinary Institute for BroadBand Technology (IBBT), , Belgium;Department of Electrical Engineering ESAT/SCD-COSIC, Katholieke Universiteit Leuven, Heverlee, Belgium B-3001 and Interdisciplinary Institute for BroadBand Technology (IBBT), , Belgium

  • Venue:
  • ISC '08 Proceedings of the 11th international conference on Information Security
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

RC4-Hash is a variable digest length cryptographic hash function based on the design of the RC4 stream cipher. In this paper, we show that RC4-Hash is not collision resistant. Collisions for any digest length can be found with an expected effort of less than 29compression function evaluations. This is extended to multicollisions for RC4-Hash. Finding a set of 2kcolliding messages has an expected cost of 27+ k·28compression function evaluations.