Analysis of multivariate hash functions

  • Authors:
  • Jean-Philippe Aumasson;Willi Meier

  • Affiliations:
  • FHNW, Windisch, Switzerland;FHNW, Windisch, Switzerland

  • Venue:
  • ICISC'07 Proceedings of the 10th international conference on Information security and cryptology
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

We analyse the security of new hash functions whose compression function is explicitly defined as a sequence of multivariate equations. First we prove non-universality of certain proposals with sparse equations, and deduce trivial collisions holding with high probability. Then we introduce a method inspired from coding theory for solving underdefined systems with a low density of non-linear monomials, and apply it to find collisions in certain functions. We also study the security of message authentication codes HMAC and NMAC built on multivariate hash functions, and demonstrate that families of low-degree functions over GF(2) are neither pseudo-random nor unpredictable.