Linear-XOR and Additive Checksums Don’t Protect Damgård-Merkle Hashes from Generic Attacks

DOI10.1007/978-3-540-79263-5_3MaRDI QIDQ5458931zbMATHOpenAlexWikidataFDO

Authors Praveen Gauravaram, John Kelsey

Publication date 24 April 2008

Published in Topics in Cryptology – CT-RSA 2008 (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1007/978-3-540-79263-5_3

Mathematics Subject Classification ID

Cryptography (94A60)

Recommendations

• New generic attacks against hash-based MACs
• MD2 is not secure without the checksum byte
• Herding Hash Functions and the Nostradamus Attack
• scientific article; zbMATH DE number 1024070
• Salvaging Merkle-Damgård for Practical Applications

Cites work

• scientific article; zbMATH DE number 4195165 (Why is no real title available?)
• scientific article; zbMATH DE number 1942427 (Why is no real title available?)
• Advances in Cryptology – CRYPTO 2004
• An Update on the Side Channel Cryptanalysis of MACs Based on Cryptographic Hash Functions
• Breaking the ICE – Finding Multicollisions in Iterated Concatenated and Expanded (ICE) Hash Functions
• Constructing Secure Hash Functions by Enhancing Merkle-Damgård Construction
• Efficient Collision Search Attacks on SHA-0
• Fast Software Encryption
• Finding Collisions in the Full SHA-1
• Herding Hash Functions and the Nostradamus Attack
• How to Break MD5 and Other Hash Functions
• Multi-block Collisions in Hash Functions Based on 3C and 3C+ Enhancements of the Merkle-Damgård Construction
• Multicollision Attacks on Some Generalized Sequential Hash Functions
• One Way Hash Functions and DES
• Second Preimages on n-Bit Hash Functions for Much Less than 2 n Work
• The MD2 Hash Function Is Not One-Way

Cited in

(12)

• Building indifferentiable compression functions from the PGV compression functions
• Structural Attacks on Two SHA-3 Candidates: Blender-n and DCH-n
• Security analysis of randomize-hash-then-sign digital signatures
• Increasing the flexibility of the herding attack
• Improved indifferentiability security bound for the JH mode
• MD2 is not secure without the checksum byte
• Cryptanalysis of the GOST Hash Function
• Cryptanalysis of GOST R hash function
• Provable chosen-target-forced-midfix preimage resistance
• A One-Pass Mode of Operation for Deterministic Message Authentication— Security beyond the Birthday Barrier
• Some methods of hash functions analysis with application to the GOST P 34.11-94 algorithm
• How to Fill Up Merkle-Damgård Hash Functions

This page was built for publication: Linear-XOR and Additive Checksums Don’t Protect Damgård-Merkle Hashes from Generic Attacks

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q5458931)