Distinguishers for the Compression Function and Output Transformation of Hamsi-256

Jean-Philippe Aumasson; Emilia Käsper; Lars Ramkilde Knudsen; Krystian Matusiewicz; Rune Odegaard; Thomas Peyrin; Martin Schläffer

Paper 2010/091

Distinguishers for the Compression Function and Output Transformation of Hamsi-256

Jean-Philippe Aumasson, Emilia Käsper, Lars Ramkilde Knudsen, Krystian Matusiewicz, Rune Odegaard, Thomas Peyrin, and Martin Schläffer

Abstract

Hamsi is one of 14 remaining candidates in NIST's Hash Competition for the future hash standard SHA-3. Until now, little analysis has been published on its resistance to differential cryptanalysis, the main technique used to attack hash functions. We present a study of Hamsi's resistance to differential and higher-order differential cryptanalysis, with focus on the 256-bit version of Hamsi. Our main results are efficient distinguishers and near-collisions for its full (3-round) compression function, and distinguishers for its full (6-round) finalization function, indicating that Hamsi's building blocks do not behave ideally.

Metadata

Available format(s): PDF
Publication info: Published elsewhere. To appear in proceedings of ACISP 2010
Keywords: hash functions differential cryptanalysis SHA-3
Contact author(s): emilia kasper @ esat kuleuven be
History: 2010-04-24: revised; 2010-02-22: received; See all versions
Short URL: https://ia.cr/2010/091
License: CC BY

BibTeX

@misc{cryptoeprint:2010/091,
      author = {Jean-Philippe Aumasson and Emilia Käsper and Lars Ramkilde Knudsen and Krystian Matusiewicz and Rune Odegaard and Thomas Peyrin and Martin Schläffer},
      title = {Distinguishers for the Compression Function and Output Transformation of Hamsi-256},
      howpublished = {Cryptology {ePrint} Archive, Paper 2010/091},
      year = {2010},
      url = {https://eprint.iacr.org/2010/091}
}