(Second) preimage attacks on step-reduced RIPEMD/RIPEMD-128 with a new local-collision approach

Authors:
Lei Wang;Yu Sasaki;Wataru Komatsubara;Kazuo Ohta;Kazuo Sakiyama
Affiliations:
The University of Electro-Communications;NTT Corporation;The University of Electro-Communications;The University of Electro-Communications;The University of Electro-Communications
Venue:
CT-RSA'11 Proceedings of the 11th international conference on Topics in cryptology: CT-RSA 2011
Year:
2011

Citing 12
Cited 4

RIPEMD-160: A Strengthened Version of RIPEMD

Proceedings of the Third International Workshop on Fast Software Encryption
MD4 is Not One-Way

Fast Software Encryption
Preimage Attack on Hash Function RIPEMD

ISPEC '09 Proceedings of the 5th International Conference on Information Security Practice and Experience
Finding Preimages in Full MD5 Faster Than Exhaustive Search

EUROCRYPT '09 Proceedings of the 28th Annual International Conference on Advances in Cryptology: the Theory and Applications of Cryptographic Techniques
Meet-in-the-Middle Preimage Attacks on Double-Branch Hash Functions: Application to RIPEMD and Others

ACISP '09 Proceedings of the 14th Australasian Conference on Information Security and Privacy
Meet-in-the-Middle Preimage Attacks Against Reduced SHA-0 and SHA-1

CRYPTO '09 Proceedings of the 29th Annual International Cryptology Conference on Advances in Cryptology
Preimage Attacks on One-Block MD4, 63-Step MD5 and More

Selected Areas in Cryptography
Preimages for Step-Reduced SHA-2

ASIACRYPT '09 Proceedings of the 15th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
A meet-in-the-middle collision attack against the new FORK-256

INDOCRYPT'07 Proceedings of the cryptology 8th international conference on Progress in cryptology
Second preimage attacks on dithered hash functions

EUROCRYPT'08 Proceedings of the theory and applications of cryptographic techniques 27th annual international conference on Advances in cryptology
Preimage attacks on step-reduced RIPEMD-128 and RIPEMD-160

Inscrypt'10 Proceedings of the 6th international conference on Information security and cryptology
Second preimages on n-bit hash functions for much less than 2n work

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques

Preimage attacks on Full-ARIRANG: analysis of DM-Mode with middle feed-forward

WISA'11 Proceedings of the 12th international conference on Information Security Applications
Distinguishers beyond three rounds of the RIPEMD-128/-160 compression functions

ACNS'12 Proceedings of the 10th international conference on Applied Cryptography and Network Security
(Pseudo) preimage attack on round-reduced grøstl hash function and others

FSE'12 Proceedings of the 19th international conference on Fast Software Encryption
Collision attacks on the reduced dual-stream hash function RIPEMD-128

FSE'12 Proceedings of the 19th international conference on Fast Software Encryption

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper uses new types of local collisions named onemessage-word local collisions to construct meet-in-the-middle preimage attacks on two double-branch hash functions RIPEMD and RIPEMD- 128, and obtains the following results. 1) A pseudo-preimage and second preimage attacks on the first 47 steps of RIPEMD (full version: 48 steps) are proposed with complexities of 2119 and 2124.5 compression function computations, respectively. The number of the attacked steps is greatly increased from previous preimage attacks on the first 33 steps and intermediate 35 steps. 2) A pseudo-preimage and preimage attacks on intermediate 36 steps of RIPEMD-128 (full version: 64 steps) are proposed with complexities of 2123 and 2126.5 compression function computations, respectively, while previous attacks can work at most intermediate 35 steps.