Cryptanalysis of Twister

Authors:
Florian Mendel;Christian Rechberger;Martin Schläffer
Affiliations:
Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria A-8010;Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria A-8010;Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria A-8010
Venue:
ACNS '09 Proceedings of the 7th International Conference on Applied Cryptography and Network Security
Year:
2009

Citing 9
Cited 3

A Design Principle for Hash Functions

CRYPTO '89 Proceedings of the 9th Annual International Cryptology Conference on Advances in Cryptology
How Easy is Collision Search. New Results and Applications to DES

CRYPTO '89 Proceedings of the 9th Annual International Cryptology Conference on Advances in Cryptology
One Way Hash Functions and DES

CRYPTO '89 Proceedings of the 9th Annual International Cryptology Conference on Advances in Cryptology
A Switching Closure Test to Analyze Cryptosystems

CRYPTO '91 Proceedings of the 11th Annual International Cryptology Conference on Advances in Cryptology
A (Second) Preimage Attack on the GOST Hash Function

Fast Software Encryption
Cryptanalysis of the GOST Hash Function

CRYPTO 2008 Proceedings of the 28th Annual conference on Cryptology: Advances in Cryptology
Twister --- A Framework for Secure and Fast Hash Functions

ISPEC '09 Proceedings of the 5th International Conference on Information Security Practice and Experience
The Rebound Attack: Cryptanalysis of Reduced Whirlpool and Grøstl

Fast Software Encryption
Linear-XOR and additive checksums don't protect Damgård-Merkle hashes from generic attacks

CT-RSA'08 Proceedings of the 2008 The Cryptopgraphers' Track at the RSA conference on Topics in cryptology

Improved Generic Algorithms for 3-Collisions

ASIACRYPT '09 Proceedings of the 15th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Practical rebound attack on 12-round cheetah-256

ICISC'09 Proceedings of the 12th international conference on Information security and cryptology
Known-Key distinguisher on round-reduced 3d block cipher

WISA'11 Proceedings of the 12th international conference on Information Security Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, we present a semi-free-start collision attack on the compression function for all Twister variants with negligible complexity. We show how this compression function attack can be extended to construct collisions for Twister-512 slightly faster than brute force search. Furthermore, we present a second-preimage and preimage attack for Twister-512 with complexity of about 2384 and 2456 compression function evaluations, respectively.