Collisions of SHA-0 and reduced SHA-1

Authors:
Eli Biham;Rafi Chen;Antoine Joux;Patrick Carribault;Christophe Lemuet;William Jalby
Affiliations:
Computer Science Department, Technion – Israel Institute of Technology, Haifa, Israel;Computer Science Department, Technion – Israel Institute of Technology, Haifa, Israel;DGA;Laboratoire PRISM, Université de Versailles St-Quentin-en-Yvelines, Versailles Cedex, France;Laboratoire PRISM, Université de Versailles St-Quentin-en-Yvelines, Versailles Cedex, France;Laboratoire PRISM, Université de Versailles St-Quentin-en-Yvelines, Versailles Cedex, France
Venue:
EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Year:
2005

Citing 2
Cited 76

Differential Collisions in SHA-0

CRYPTO '98 Proceedings of the 18th Annual International Cryptology Conference on Advances in Cryptology
Update on SHA-1

CT-RSA'05 Proceedings of the 2005 international conference on Topics in Cryptology

Deep Jam: Conversion of Coarse-Grain Parallelism to Instruction-Level and Vector Parallelism for Irregular Applications

Proceedings of the 14th International Conference on Parallel Architectures and Compilation Techniques
A survey of recent developments in cryptographic algorithms for smart cards

Computer Networks: The International Journal of Computer and Telecommunications Networking
A strict evaluation method on the number of conditions for the SHA-1 collision search

Proceedings of the 2008 ACM symposium on Information, computer and communications security
Searching for Messages Conforming to Arbitrary Sets of Conditions in SHA-256

Research in Cryptology
Collisions on SHA-0 in One Hour

Fast Software Encryption
SWIFFT: A Modest Proposal for FFT Hashing

Fast Software Encryption
Second Preimage Attack on 3-Pass HAVAL and Partial Key-Recovery Attacks on HMAC/NMAC-3-Pass HAVAL

Fast Software Encryption
Preimages for Reduced SHA-0 and SHA-1

CRYPTO 2008 Proceedings of the 28th Annual conference on Cryptology: Advances in Cryptology
How to Use Merkle-Damgård -- On the Security Relations between Signature Schemes and Their Inner Hash Functions

ProvSec '08 Proceedings of the 2nd International Conference on Provable Security
Improved Collision Search for Hash Functions: New Advanced Message Modification

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences
Twister --- A Framework for Secure and Fast Hash Functions

ISPEC '09 Proceedings of the 5th International Conference on Information Security Practice and Experience
Preimage Attack on Hash Function RIPEMD

ISPEC '09 Proceedings of the 5th International Conference on Information Security Practice and Experience
Cryptanalysis on HMAC/NMAC-MD5 and MD5-MAC

EUROCRYPT '09 Proceedings of the 28th Annual International Conference on Advances in Cryptology: the Theory and Applications of Cryptographic Techniques
Second Preimage Attack on 5-Pass HAVAL and Partial Key-Recovery Attack on HMAC/NMAC-5-Pass HAVAL

AFRICACRYPT '09 Proceedings of the 2nd International Conference on Cryptology in Africa: Progress in Cryptology
Efficient pseudorandom functions from the decisional linear assumption and weaker variants

Proceedings of the 16th ACM conference on Computer and communications security
Recent developments in cryptographic hash functions: Security implications and future directions

Information Security Tech. Report
Related-key rectangle attack on the full SHACAL-1

SAC'06 Proceedings of the 13th international conference on Selected areas in cryptography
Constructing an ideal hash function from weak ideal compression functions

SAC'06 Proceedings of the 13th international conference on Selected areas in cryptography
A new strategy for finding a differential path of SHA-1

ACISP'07 Proceedings of the 12th Australasian conference on Information security and privacy
New local collisions for the SHA-2 hash family

ICISC'07 Proceedings of the 10th international conference on Information security and cryptology
Hash functions and the (amplified) boomerang attack

CRYPTO'07 Proceedings of the 27th annual international cryptology conference on Advances in cryptology
A simple and efficient key exchange scheme against the smart card loss problem

EUC'07 Proceedings of the 2007 conference on Emerging direction in embedded and ubiquitous computing
Collisions for 70-step SHA-1: on the full cost of collision search

SAC'07 Proceedings of the 14th international conference on Selected areas in cryptography
On authentication with HMAC and non-random properties

FC'07/USEC'07 Proceedings of the 11th International Conference on Financial cryptography and 1st International conference on Usable Security
Second preimage attacks on dithered hash functions

EUROCRYPT'08 Proceedings of the theory and applications of cryptographic techniques 27th annual international conference on Advances in cryptology
DAKOTA: hashing from a combination of modular arithmetic and symmetric cryptography

ACNS'08 Proceedings of the 6th international conference on Applied cryptography and network security
TWISTERπ – a framework for secure and fast hash functions

International Journal of Applied Cryptography
Domain extension for enhanced target collision-resistant hash functions

FSE'10 Proceedings of the 17th international conference on Fast software encryption
Distinguishing attack on secret prefix MAC instantiated with reduced SHA-1

ICISC'09 Proceedings of the 12th international conference on Information security and cryptology
Message recovery and pseudo-preimage attacks on the compression function of Hamsi-256

LATINCRYPT'10 Proceedings of the First international conference on Progress in cryptology: cryptology and information security in Latin America
Second-preimage analysis of reduced SHA-1

ACISP'10 Proceedings of the 15th Australasian conference on Information security and privacy
Matrix representation of conditions for the collision attack of SHA-1 and its application to the message modification

IWSEC'10 Proceedings of the 5th international conference on Advances in information and computer security
MJH: a faster alternative to MDC-2

CT-RSA'11 Proceedings of the 11th international conference on Topics in cryptology: CT-RSA 2011
Classification and generation of disturbance vectors for collision attacks against SHA-1

Designs, Codes and Cryptography
Cryptanalysis of the compression function of SIMD

ACISP'11 Proceedings of the 16th Australasian conference on Information security and privacy
Distinguishing attacks on LPMAC based on the full RIPEMD and reduced-step RIPEMD-{256, 320}

Inscrypt'10 Proceedings of the 6th international conference on Information security and cryptology
Collision attack for the hash function extended MD4

ICICS'11 Proceedings of the 13th international conference on Information and communications security
On the collision resistance of RIPEMD-160

ISC'06 Proceedings of the 9th international conference on Information Security
Finding SHA-1 characteristics: general results and applications

ASIACRYPT'06 Proceedings of the 12th international conference on Theory and Application of Cryptology and Information Security
Improved collision search for SHA-0

ASIACRYPT'06 Proceedings of the 12th international conference on Theory and Application of Cryptology and Information Security
Forgery and partial key-recovery attacks on HMAC and NMAC using hash collisions

ASIACRYPT'06 Proceedings of the 12th international conference on Theory and Application of Cryptology and Information Security
On the internal structure of ALPHA-MAC

VIETCRYPT'06 Proceedings of the First international conference on Cryptology in Vietnam
Generalized compact knapsacks are collision resistant

ICALP'06 Proceedings of the 33rd international conference on Automata, Languages and Programming - Volume Part II
Some attacks against a double length hash proposal

ASIACRYPT'05 Proceedings of the 11th international conference on Theory and Application of Cryptology and Information Security
A failure-friendly design principle for hash functions

ASIACRYPT'05 Proceedings of the 11th international conference on Theory and Application of Cryptology and Information Security
On bluetooth repairing: key agreement based on symmetric-key cryptography

CISC'05 Proceedings of the First SKLOIS conference on Information Security and Cryptology
Collision-Resistant usage of MD5 and SHA-1 via message preprocessing

CT-RSA'06 Proceedings of the 2006 The Cryptographers' Track at the RSA conference on Topics in Cryptology
An optimal non-interactive message authentication protocol

CT-RSA'06 Proceedings of the 2006 The Cryptographers' Track at the RSA conference on Topics in Cryptology
Collisions and near-collisions for reduced-round tiger

FSE'06 Proceedings of the 13th international conference on Fast Software Encryption
Analysis of step-reduced SHA-256

FSE'06 Proceedings of the 13th international conference on Fast Software Encryption
Breaking the ICE – finding multicollisions in iterated concatenated and expanded (ICE) hash functions

FSE'06 Proceedings of the 13th international conference on Fast Software Encryption
A new dedicated 256-bit hash function: FORK-256

FSE'06 Proceedings of the 13th international conference on Fast Software Encryption
The impact of carries on the complexity of collision attacks on SHA-1

FSE'06 Proceedings of the 13th international conference on Fast Software Encryption
Efficient collision search attacks on SHA-0

CRYPTO'05 Proceedings of the 25th annual international conference on Advances in Cryptology
Finding collisions in the full SHA-1

CRYPTO'05 Proceedings of the 25th annual international conference on Advances in Cryptology
On the security of encryption modes of MD4, MD5 and HAVAL

ICICS'05 Proceedings of the 7th international conference on Information and Communications Security
On the security of HMAC and NMAC based on HAVAL, MD4, MD5, SHA-0 and SHA-1 (extended abstract)

SCN'06 Proceedings of the 5th international conference on Security and Cryptography for Networks
Applications of SAT solvers to cryptanalysis of hash functions

SAT'06 Proceedings of the 9th international conference on Theory and Applications of Satisfiability Testing
Collision-Resistant no more: hash-and-sign paradigm revisited

PKC'06 Proceedings of the 9th international conference on Theory and Practice of Public-Key Cryptography
Herding hash functions and the nostradamus attack

EUROCRYPT'06 Proceedings of the 24th annual international conference on The Theory and Applications of Cryptographic Techniques
Constructing secure hash functions by enhancing merkle-damgård construction

ACISP'06 Proceedings of the 11th Australasian conference on Information Security and Privacy
Multi-block collisions in hash functions based on 3c and 3c+ enhancements of the merkle-damgård construction

ICISC'06 Proceedings of the 9th international conference on Information Security and Cryptology
A simple related-key attack on the full SHACAL-1

CT-RSA'07 Proceedings of the 7th Cryptographers' track at the RSA conference on Topics in Cryptology
Exploiting coding theory for collision attacks on SHA-1

IMA'05 Proceedings of the 10th international conference on Cryptography and Coding
Analysis of a SHA-256 variant

SAC'05 Proceedings of the 12th international conference on Selected Areas in Cryptography
Impact of rotations in SHA-1 and related hash functions

SAC'05 Proceedings of the 12th international conference on Selected Areas in Cryptography
Improved collision attack on MD4 with probability almost 1

ICISC'05 Proceedings of the 8th international conference on Information Security and Cryptology
Biclique cryptanalysis of the full AES

ASIACRYPT'11 Proceedings of the 17th international conference on The Theory and Application of Cryptology and Information Security
A tutorial on high performance computing applied to cryptanalysis

EUROCRYPT'12 Proceedings of the 31st Annual international conference on Theory and Applications of Cryptographic Techniques
The Grindahl hash functions

FSE'07 Proceedings of the 14th international conference on Fast Software Encryption
Algebraic cryptanalysis of 58-round SHA-1

FSE'07 Proceedings of the 14th international conference on Fast Software Encryption
Building a collision for 75-round reduced SHA-1 using GPU clusters

Euro-Par'12 Proceedings of the 18th international conference on Parallel Processing
Provable security of the knudsen-preneel compression functions

ASIACRYPT'12 Proceedings of the 18th international conference on The Theory and Application of Cryptology and Information Security
Preimage and pseudo-collision attacks on step-reduced SM3 hash function

Information Processing Letters
Joux multicollisions attack in sponge construction

Proceedings of the 6th International Conference on Security of Information and Networks
FPGA-based implementation alternatives for the inner loop of the Secure Hash Algorithm SHA-256

Microprocessors & Microsystems

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we describe improvements to the techniques used to cryptanalyze SHA-0 and introduce the first results on SHA-1. The results include a generic multi-block technique that uses near-collisions in order to find collisions, and a four-block collision of SHA-0 found using this technique with complexity 251. Then, extension of this and prior techniques are presented, that allow us to find collisions of reduced versions of SHA-1. We give collisions of variants with up to 40 rounds, and show the complexities of longer variants. These techniques show that collisions up to about 53–58 rounds can still be found faster than by birthday attacks.