Related-key rectangle attack on the full SHACAL-1

Authors:
Orr Dunkelman;Nathan Keller;Jongsung Kim
Affiliations:
Computer Science Department, Technion, Haifa, Israel;Einstein Institute of Mathematics, Hebrew University, Jerusalem, Israel;ESAT/SCD-COSIC, Katholieke Universiteit Leuven, Leuven-Heverlee, Belgium and Center for Information Security Technologies, Korea University, Seoul, Korea
Venue:
SAC'06 Proceedings of the 13th international conference on Selected areas in cryptography
Year:
2006

Citing 15
Cited 8

Differential cryptanalysis of the data encryption standard

Differential cryptanalysis of the data encryption standard
Analysis of SHA-1 in Encryption Mode

CT-RSA 2001 Proceedings of the 2001 Conference on Topics in Cryptology: The Cryptographer's Track at RSA
Differential Collisions in SHA-0

CRYPTO '98 Proceedings of the 18th Annual International Cryptology Conference on Advances in Cryptology
Amplified Boomerang Attack against Reduced-Round SHACAL

ASIACRYPT '02 Proceedings of the 8th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
New Results on Boomerang and Rectangle Attacks

FSE '02 Revised Papers from the 9th International Workshop on Fast Software Encryption
Cryptanalysis of Skipjack reduced to 31 rounds using impossible differentials

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques
A related-key rectangle attack on the full KASUMI

ASIACRYPT'05 Proceedings of the 11th international conference on Theory and Application of Cryptology and Information Security
Related-key rectangle attacks on reduced versions of SHACAL-1 and AES-192

FSE'05 Proceedings of the 12th international conference on Fast Software Encryption
Efficient collision search attacks on SHA-0

CRYPTO'05 Proceedings of the 25th annual international conference on Advances in Cryptology
Finding collisions in the full SHA-1

CRYPTO'05 Proceedings of the 25th annual international conference on Advances in Cryptology
Cryptanalysis of the hash functions MD4 and RIPEMD

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
How to break MD5 and other hash functions

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Collisions of SHA-0 and reduced SHA-1

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Related-Key boomerang and rectangle attacks

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Related-Key attacks on reduced rounds of SHACAL-2

INDOCRYPT'04 Proceedings of the 5th international conference on Cryptology in India

Reflection Cryptanalysis of Some Ciphers

INDOCRYPT '08 Proceedings of the 9th International Conference on Cryptology in India: Progress in Cryptology
Pseudorandom-Function Property of the Step-Reduced Compression Functions of SHA-256 and SHA-512

Information Security Applications
Advanced Differential-Style Cryptanalysis of the NSA's Skipjack Block Cipher

Cryptologia
The delicate issues of addition with respect to XOR differences

SAC'07 Proceedings of the 14th international conference on Selected areas in cryptography
Pseudorandom functions and permutations provably secure against related-key attacks

CRYPTO'10 Proceedings of the 30th annual conference on Advances in cryptology
Differential and rectangle attacks on reduced-round SHACAL-1

INDOCRYPT'06 Proceedings of the 7th international conference on Cryptology in India
Evaluation of PP-1 Cipher Resistance against Differential and Linear Cryptanalysis in Comparison to a DES-like Cipher

Fundamenta Informaticae - Cryptology in Progress: 10th Central European Conference on Cryptology, Będlewo Poland, 2010
Related-key rectangle attacks on reduced AES-192 and AES-256

FSE'07 Proceedings of the 14th international conference on Fast Software Encryption

Quantified Score

Hi-index	0.00

Visualization

Abstract

SHACAL-1 is a 160-bit block cipher with variable key length of up to 512-bit key based on the hash function SHA-1. It was submitted to the NESSIE project and was accepted as a finalist for the 2nd phase of the evaluation. In this paper we devise the first known attack on the full 80-round SHACAL-1 faster than exhaustive key search. The related-key differentials used in the attack are based on transformation of the collision-producing differentials of SHA-1 presented by Wang et al.