Cryptology ePrint Archive: Report 2008/486

Inside the Hypercube

Jean-Philippe Aumasson and Eric Brier and Willi Meier and Marķa Naya-Plasencia and Thomas Peyrin

Abstract: Bernstein's CubeHash is a hash function family that includes four functions submitted to the NIST Hash Competition. A CubeHash function is parametrized by a number of rounds r, a block byte size b, and a digest bit length h (the compression function makes r rounds, while the finalization function makes 10r rounds). The 1024-bit internal state of CubeHash is represented as a five-dimensional hypercube. The submissions to NIST recommends r=8, b=1, and h in {224,256,384,512}.

This paper presents the first external analysis of CubeHash, with: improved standard generic attacks for collisions and preimages; a multicollision attack that exploits fixed points; a study of the round function symmetries; a preimage attack that exploits these symmetries; a practical collision attack on a weakened version of CubeHash; a study of fixed points and an example of nontrivial fixed point; high-probability truncated differentials over 10 rounds. Since the first publication of these results, several collision attacks for reduced versions of CubeHash were published by Dai, Peyrin, et al. Our results are more general, since they apply to any choice of the parameters, and show intrinsic properties of the CubeHash design, rather than attacks on specific versions.

Category / Keywords: secret-key cryptography /

Date: received 19 Nov 2008, last revised 11 May 2010

Contact author: jeanphilippe aumasson at gmail com

Available format(s): PDF | BibTeX Citation

Note: Added missing author name (to the eprint form, not to the PDF).

Version: 20100511:195428 (All versions of this report)

Discussion forum: Show discussion | Start new discussion


[ Cryptology ePrint archive ]