Finding SHA-1 characteristics: general results and applications

Authors:
Christophe De Cannière;Christian Rechberger
Affiliations:
Institute for Applied Information Processing and Communications, Graz University of Technology, Graz, Austria;Institute for Applied Information Processing and Communications, Graz University of Technology, Graz, Austria
Venue:
ASIACRYPT'06 Proceedings of the 12th international conference on Theory and Application of Cryptology and Information Security
Year:
2006

Citing 12
Cited 59

Differential Collisions in SHA-0

CRYPTO '98 Proceedings of the 18th Annual International Cryptology Conference on Advances in Cryptology
Provably good codes for hash function design

SAC'06 Proceedings of the 13th international conference on Selected areas in cryptography
Searching for differential paths in MD4

FSE'06 Proceedings of the 13th international conference on Fast Software Encryption
A study of the MD5 attacks: insights and improvements

FSE'06 Proceedings of the 13th international conference on Fast Software Encryption
Update on SHA-1

CT-RSA'05 Proceedings of the 2005 international conference on Topics in Cryptology
Efficient collision search attacks on SHA-0

CRYPTO'05 Proceedings of the 25th annual international conference on Advances in Cryptology
Finding collisions in the full SHA-1

CRYPTO'05 Proceedings of the 25th annual international conference on Advances in Cryptology
Cryptanalysis of the hash functions MD4 and RIPEMD

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
How to break MD5 and other hash functions

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Collisions of SHA-0 and reduced SHA-1

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Herding hash functions and the nostradamus attack

EUROCRYPT'06 Proceedings of the 24th annual international conference on The Theory and Applications of Cryptographic Techniques
Exploiting coding theory for collision attacks on SHA-1

IMA'05 Proceedings of the 10th international conference on Cryptography and Coding

Low-overhead byzantine fault-tolerant storage

Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles
Efficient Hash Collision Search Strategies on Special-Purpose Hardware

Research in Cryptology
Collisions on SHA-0 in One Hour

Fast Software Encryption
A (Second) Preimage Attack on the GOST Hash Function

Fast Software Encryption
Collisions for Round-Reduced LAKE

ACISP '08 Proceedings of the 13th Australasian conference on Information Security and Privacy
Cryptanalysis of the GOST Hash Function

CRYPTO 2008 Proceedings of the 28th Annual conference on Cryptology: Advances in Cryptology
Preimages for Reduced SHA-0 and SHA-1

CRYPTO 2008 Proceedings of the 28th Annual conference on Cryptology: Advances in Cryptology
Collisions for RC4-Hash

ISC '08 Proceedings of the 11th international conference on Information Security
Twister --- A Framework for Secure and Fast Hash Functions

ISPEC '09 Proceedings of the 5th International Conference on Information Security Practice and Experience
Speeding up Collision Search for Byte-Oriented Hash Functions

CT-RSA '09 Proceedings of the The Cryptographers' Track at the RSA Conference 2009 on Topics in Cryptology
Rebound Distinguishers: Results on the Full Whirlpool Compression Function

ASIACRYPT '09 Proceedings of the 15th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
MD5 Is Weaker Than Weak: Attacks on Concatenated Combiners

ASIACRYPT '09 Proceedings of the 15th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Improved Cryptanalysis of Skein

ASIACRYPT '09 Proceedings of the 15th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Second Preimage Attack on SHAMATA-512

INDOCRYPT '09 Proceedings of the 10th International Conference on Cryptology in India: Progress in Cryptology
Finding Collisions for a 45-Step Simplified HAS-V

Information Security Applications
Multi-collision attack on the compression functions of MD4 and 3-pass HAVAL

ICISC'07 Proceedings of the 10th international conference on Information security and cryptology
Colliding message pair for 53-step HAS-160

ICISC'07 Proceedings of the 10th international conference on Information security and cryptology
Weaknesses in the HAS-V compression function

ICISC'07 Proceedings of the 10th international conference on Information security and cryptology
Hash functions and the (amplified) boomerang attack

CRYPTO'07 Proceedings of the 27th annual international cryptology conference on Advances in cryptology
Cryptanalysis of GRINDAHL

ASIACRYPT'07 Proceedings of the Advances in Crypotology 13th international conference on Theory and application of cryptology and information security
Collisions for 70-step SHA-1: on the full cost of collision search

SAC'07 Proceedings of the 14th international conference on Selected areas in cryptography
On authentication with HMAC and non-random properties

FC'07/USEC'07 Proceedings of the 11th International Conference on Financial cryptography and 1st International conference on Usable Security
TWISTERπ – a framework for secure and fast hash functions

International Journal of Applied Cryptography
Cryptanalysis of ESSENCE

FSE'10 Proceedings of the 17th international conference on Fast software encryption
Rebound attack on reduced-round versions of JH

FSE'10 Proceedings of the 17th international conference on Fast software encryption
Rotational cryptanalysis of ARX

FSE'10 Proceedings of the 17th international conference on Fast software encryption
Developing a hardware evaluation method for SHA-3 candidates

CHES'10 Proceedings of the 12th international conference on Cryptographic hardware and embedded systems
Second-preimage analysis of reduced SHA-1

ACISP'10 Proceedings of the 15th Australasian conference on Information security and privacy
Matrix representation of conditions for the collision attack of SHA-1 and its application to the message modification

IWSEC'10 Proceedings of the 5th international conference on Advances in information and computer security
Improved collision attacks on the reduced-round Grøstl hash function

ISC'10 Proceedings of the 13th international conference on Information security
Cryptanalysis of the ESSENCE family of hash functions

Inscrypt'09 Proceedings of the 5th international conference on Information security and cryptology
The differential analysis of S-functions

SAC'10 Proceedings of the 17th international conference on Selected areas in cryptography
Optimal covering codes for finding near-collisions

SAC'10 Proceedings of the 17th international conference on Selected areas in cryptography
Deterministic differential properties of the compression function of BMW

SAC'10 Proceedings of the 17th international conference on Selected areas in cryptography
Classification and generation of disturbance vectors for collision attacks against SHA-1

Designs, Codes and Cryptography
Linear analysis of reduced-round cubehash

ACNS'11 Proceedings of the 9th international conference on Applied cryptography and network security
Collisions of MMO-MD5 and their impact on original MD5

AFRICACRYPT'11 Proceedings of the 4th international conference on Progress in cryptology in Africa
Visual programming of location-based services

HI'11 Proceedings of the 2011 international conference on Human interface and the management of information - Volume Part I
Collision attack for the hash function extended MD4

ICICS'11 Proceedings of the 13th international conference on Information and communications security
Automatic search for related-key differential characteristics in byte-oriented block ciphers: application to AES, Camellia, Khazad and others

EUROCRYPT'10 Proceedings of the 29th Annual international conference on Theory and Applications of Cryptographic Techniques
Cryptanalysis of the 10-round hash and full compression function of SHAvite-3-512

AFRICACRYPT'10 Proceedings of the Third international conference on Cryptology in Africa
Rebound attacks on the reduced grøstl hash function

CT-RSA'10 Proceedings of the 2010 international conference on Topics in Cryptology
Finding SHA-2 characteristics: searching through a minefield of contradictions

ASIACRYPT'11 Proceedings of the 17th international conference on The Theory and Application of Cryptology and Information Security
Keyed hash function based on a dynamic lookup table of functions

Information Sciences: an International Journal
Chosen-prefix collisions for MD5 and applications

International Journal of Applied Cryptography
Cryptanalysis of round-reduced HAS-160

ICISC'11 Proceedings of the 14th international conference on Information Security and Cryptology
The Grindahl hash functions

FSE'07 Proceedings of the 14th international conference on Fast Software Encryption
Algebraic cryptanalysis of 58-round SHA-1

FSE'07 Proceedings of the 14th international conference on Fast Software Encryption
Building a collision for 75-round reduced SHA-1 using GPU clusters

Euro-Par'12 Proceedings of the 18th international conference on Parallel Processing
Differential attacks on reduced RIPEMD-160

ISC'12 Proceedings of the 15th international conference on Information Security
Collision attacks on the reduced dual-stream hash function RIPEMD-128

FSE'12 Proceedings of the 19th international conference on Fast Software Encryption
Bicliques for preimages: attacks on skein-512 and the SHA-2 family

FSE'12 Proceedings of the 19th international conference on Fast Software Encryption
Hash combiners for second pre-image resistance, target collision resistance and pre-image resistance have long output

SCN'12 Proceedings of the 8th international conference on Security and Cryptography for Networks
Analysis of differential attacks in ARX constructions

ASIACRYPT'12 Proceedings of the 18th international conference on The Theory and Application of Cryptology and Information Security
Finding collisions for round-reduced SM3

CT-RSA'13 Proceedings of the 13th international conference on Topics in Cryptology
Multi-differential cryptanalysis on reduced DM-PRESENT-80: collisions and other differential properties

ICISC'12 Proceedings of the 15th international conference on Information Security and Cryptology
Cryptophia's short combiner for collision-resistant hash functions

ACNS'13 Proceedings of the 11th international conference on Applied Cryptography and Network Security
Is it really you?: user identification via adaptive behavior fingerprinting

Proceedings of the 4th ACM conference on Data and application security and privacy
Internal differential collision attacks on the reduced-round GrØstl-0 hash function

Designs, Codes and Cryptography

Quantified Score

Hi-index	0.00

Visualization

Abstract

The most efficient collision attacks on members of the SHA family presented so far all use complex characteristics which were manually constructed by Wang et al. In this report, we describe a method to search for characteristics in an automatic way. This is particularly useful for multi-block attacks, and as a proof of concept, we give a two-block collision for 64-step SHA-1 based on a new characteristic. The highest number of steps for which a SHA-1 collision was published so far was 58. We also give a unified view on the expected work factor of a collision search and the needed degrees of freedom for the search, which facilitates optimization.