Preimage Attack on Hash Function RIPEMD

Authors:
Gaoli Wang;Shaohui Wang
Affiliations:
School of Computer Science and Technology, Donghua University, Shanghai, China 201620;Nanjing University of Posts and Telecommunications, Nanjing, China 210046
Venue:
ISPEC '09 Proceedings of the 5th International Conference on Information Security Practice and Experience
Year:
2009

Citing 14
Cited 4

The MD4 Message Digest Algorithm

CRYPTO '90 Proceedings of the 10th Annual International Cryptology Conference on Advances in Cryptology
The First Two Rounds of MD4 are Not One-Way

FSE '98 Proceedings of the 5th International Workshop on Fast Software Encryption
MD4 is Not One-Way

Fast Software Encryption
Preimage Attacks on 3, 4, and 5-Pass HAVAL

ASIACRYPT '08 Proceedings of the 14th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Hash functions based on block ciphers

EUROCRYPT'92 Proceedings of the 11th annual international conference on Theory and application of cryptographic techniques
Inversion attacks on secure hash functions using SAT solvers

SAT'07 Proceedings of the 10th international conference on Theory and applications of satisfiability testing
Weaknesses in the HAS-V compression function

ICISC'07 Proceedings of the 10th international conference on Information security and cryptology
Formalizing human ignorance

VIETCRYPT'06 Proceedings of the First international conference on Cryptology in Vietnam
Preimage and collision attacks on MD2

FSE'05 Proceedings of the 12th international conference on Fast Software Encryption
Efficient collision search attacks on SHA-0

CRYPTO'05 Proceedings of the 25th annual international conference on Advances in Cryptology
Finding collisions in the full SHA-1

CRYPTO'05 Proceedings of the 25th annual international conference on Advances in Cryptology
Cryptanalysis of the hash functions MD4 and RIPEMD

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
How to break MD5 and other hash functions

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Collisions of SHA-0 and reduced SHA-1

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques

Meet-in-the-Middle Preimage Attacks on Double-Branch Hash Functions: Application to RIPEMD and Others

ACISP '09 Proceedings of the 14th Australasian Conference on Information Security and Privacy
(Second) preimage attacks on step-reduced RIPEMD/RIPEMD-128 with a new local-collision approach

CT-RSA'11 Proceedings of the 11th international conference on Topics in cryptology: CT-RSA 2011
Preimage attacks on step-reduced RIPEMD-128 and RIPEMD-160

Inscrypt'10 Proceedings of the 6th international conference on Information security and cryptology
Improved preimage attack on one-block MD4

Journal of Systems and Software

Quantified Score

Hi-index	0.00

Visualization

Abstract

RIPEMD is a cryptographic hash function devised in the framework of the RIPE project (RACE Integrity Primitives Evaluation, 1988-1992). It consists of two parallel lines, and each line is identical to MD4 except for some internal constants. It has been broken by the collision attack, but no preimage attack was given. In this paper, we give a preimage attack on the compression function of the 26-step reduced RIPEMD with complexity 2110 compression function computations, and we extend the attack on the compression function to an attack on the 26-step reduced RIPEMD with complexity 2115.2 instead of 2128. Then we extend the attack on 26 steps to the attack on 29 steps with the same complexity. Moreover, we can reduce the complexity of the preimage attack on the full RIPEMD without the padding rule by 1 bit compared with the brute-force attack.