Cryptanalysis of Some Double-Block-Length Hash Modes of Block Ciphers with $n$-Bit Block and $n$-Bit Key

Deukjo Hong; Daesung Kwon

Paper 2013/174

Cryptanalysis of Some Double-Block-Length Hash Modes of Block Ciphers with $n$ -Bit Block and $n$ -Bit Key

Deukjo Hong and Daesung Kwon

Abstract

In this paper, we make attacks on DBL (Double-Block-Length) hash modes of block ciphers with $n$ -bit key and $n$ -bit block. Our preimage attack on the hash function of MDC-4 scheme requires the time complexity $2^{3 n / 2}$ , which is significantly improved compared to the previous results. Our collision attack on the hash function of MJH scheme has time complexity less than for . Our preimage attack on the compression function of MJH scheme find a preimage with time complexity of . It is converted to a preimage attack on the hash function with time complexity of . Our preimage attack on the compression function of Mennink's scheme find a preimage with time complexity of . It is converted to a preimage attack on the hash function with time complexity of . These attacks are helpful for understanding the security of the hash modes together with their security proofs.

Note: Some of described attacks are revised.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Published elsewhere. Unknown where it was published
Keywords: Hash Function Hash Mode Collision Preimage
Contact author(s): hongdj @ ensec re kr
History: 2013-04-05: revised; 2013-03-30: received; See all versions
Short URL: https://ia.cr/2013/174
License: CC BY

BibTeX

@misc{cryptoeprint:2013/174,
      author = {Deukjo Hong and Daesung Kwon},
      title = {Cryptanalysis of Some Double-Block-Length Hash Modes of Block Ciphers with $n$-Bit Block and $n$-Bit Key},
      howpublished = {Cryptology {ePrint} Archive, Paper 2013/174},
      year = {2013},
      url = {https://eprint.iacr.org/2013/174}
}

Paper 2013/174

Cryptanalysis of Some Double-Block-Length Hash Modes of Block Ciphers with n-Bit Block and n-Bit Key

Abstract

Metadata

Cryptanalysis of Some Double-Block-Length Hash Modes of Block Ciphers with $n$ -Bit Block and $n$ -Bit Key