MD2 is not secure without the checksum byte
type: Item
instance of: scholarly article
title: MD2 is not secure without the checksum byte
zbMATH Open document ID: 0880.94010
DOI: 10.1023/A:1008220711840
author: N. Rogier
author: Pascal Chauvaud
published in: Designs, Codes and Cryptography
publication date: 1998-01-27T00:00:00Z
review text: Security properties of the MD2 Message Digest Algorithm are investigated. First the MD2 hash function is described and general properties of one of its basic blocks -- so called ``compression'' function are investigated. Then it is shown how to find collisions for the compression function in the cases where one input of the function is either equal to zero or ends with consecutive zeros. As the MD2 compression function is shown not to be collision-free, it is concluded that the security of MD2 is in fact based on the redundancy introduced by the checksum block added to the input message.
Mathematics Subject Classification ID: 94A60
zbMATH DE Number: 1076980
zbMATH Keywords: message digest
zbMATH Keywords: hashing function
zbMATH Keywords: collision
Wikidata QID: Q28000547
reviewed by: Jozef Vyskoč
MaRDI profile type: Publication
Recommended article: The MD2 Hash Function Is Not One-Way
Recommended article: MD5 Is Weaker Than Weak: Attacks on Concatenated Combiners
Recommended article: Linear-XOR and Additive Checksums Don’t Protect Damgård-Merkle Hashes from Generic Attacks
Recommended article: Cryptanalysis of MD2
Recommended article: INT-RUP security of checksum-based authenticated encryption
Recommended article: Information and Communications Security
Recommended article: A New Type of 2-Block Collisions in MD5
Recommended article: Q4279662
Recommended article: Characterizing Padding Rules of MD Hash Functions Preserving Collision Security
description: scientific article; zbMATH DE number 1076980