Collisions for 70-step SHA-1: on the full cost of collision search

  • Authors:
  • Christophe De Cannière;Florian Mendel;Christian Rechberger

  • Affiliations:
  • Katholieke Universiteit Leuven, Dept. ESAT/SCD-COSIC, Heverlee, Belgium;Graz University of Technology, Institute for Applied Information Processing and Communications, Inffeldgasse, Graz, Austria;Graz University of Technology, Institute for Applied Information Processing and Communications, Inffeldgasse, Graz, Austria

  • Venue:
  • SAC'07 Proceedings of the 14th international conference on Selected areas in cryptography
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

The diversity of methods for fast collision search in SHA-1 and similar hash functions makes a comparison of them difficult. The literature is at times very vague on this issue, which makes comparison even harder. In situations where differences in estimates of attack complexity of a small factor might influence short-term recommendations of standardization bodies, uncertainties and ambiguities in the literature amounting to a similar order of magnitude are unhelpful. We survey different techniques and propose a simple but effective method to facilitate comparison. In a case study, we consider a newly developed attack on 70-step SHA-1, and give complexity estimates and performance measurements of this new and improved collision search method.