Cryptology ePrint Archive: Report 2013/600

Improved Cryptanalysis of Reduced RIPEMD-160

Florian Mendel and Thomas Peyrin and Martin Schläffer and Lei Wang and Shuang Wu

Abstract: In this article, we propose an improved cryptanalysis of the double-branch hash function standard RIPEMD-160. Using a carefully designed non-linear path search tool, we study the potential differential paths that can be constructed from a difference in a single message word and show that some of these message words can lead to very good differential path candidates. Leveraging the recent freedom degree utilization technique from Landelle and Peyrin to merge two branch instances, we eventually manage to obtain a semi-free-start collision attack for 42 steps of the RIPEMD-160 compression function, while the previously best know result reached 36 steps. In addition, we also describe a 36-step semi-free-start collision attack which starts from the first step.

Category / Keywords: secret-key cryptography / RIPEMD-160, semi-free-start collision, compression function, hash function

Original Publication (with minor differences): IACR-ASIACRYPT-2013

Date: received 17 Sep 2013

Contact author: thomas peyrin at gmail com

Available format(s): PDF | BibTeX Citation

Version: 20130919:123819 (All versions of this report)

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]