Linear-XOR and Additive Checksums Don’t Protect Damgård-Merkle Hashes from Generic Attacks

DOI10.1007/978-3-540-79263-5_3zbMath1153.94379OpenAlexW1551374506WikidataQ57006288 ScholiaQ57006288MaRDI QIDQ5458931

John Kelsey, Praveen Gauravaram

Publication date: 24 April 2008

Published in: Topics in Cryptology – CT-RSA 2008 (Search for Journal in Brave)

Full work available at URL: https://doi.org/10.1007/978-3-540-79263-5_3

Mathematics Subject Classification ID

Cryptography (94A60)

Related Items (11)

Provable Chosen-Target-Forced-Midfix Preimage Resistance ⋮ Improved indifferentiability security bound for the JH mode ⋮ Security analysis of randomize-hash-then-sign digital signatures ⋮ Cryptanalysis of GOST R hash function ⋮ A One-Pass Mode of Operation for Deterministic Message Authentication— Security beyond the Birthday Barrier ⋮ Cryptanalysis of the GOST Hash Function ⋮ How to Fill Up Merkle-Damgård Hash Functions ⋮ Building indifferentiable compression functions from the PGV compression functions ⋮ Некоторые методы анализа функций хэширования и их применение к алгоритму ГОСТ Р 34.11-94 ⋮ Structural Attacks on Two SHA-3 Candidates: Blender-n and DCH-n ⋮ Increasing the flexibility of the herding attack

Cites Work

• Unnamed Item
• Unnamed Item
• Multicollision Attacks on Some Generalized Sequential Hash Functions
• Herding Hash Functions and the Nostradamus Attack
• Breaking the ICE – Finding Multicollisions in Iterated Concatenated and Expanded (ICE) Hash Functions
• Advances in Cryptology – CRYPTO 2004
• Multi-block Collisions in Hash Functions Based on 3C and 3C+ Enhancements of the Merkle-Damgård Construction
• How to Break MD5 and Other Hash Functions
• Second Preimages on n-Bit Hash Functions for Much Less than 2 n Work
• Efficient Collision Search Attacks on SHA-0
• Finding Collisions in the Full SHA-1
• An Update on the Side Channel Cryptanalysis of MACs Based on Cryptographic Hash Functions
• The MD2 Hash Function Is Not One-Way
• Fast Software Encryption
• Constructing Secure Hash Functions by Enhancing Merkle-Damgård Construction
• One Way Hash Functions and DES

This page was built for publication: Linear-XOR and Additive Checksums Don’t Protect Damgård-Merkle Hashes from Generic Attacks