Paper 2021/1119

Automatic Classical and Quantum Rebound Attacks on AES-like Hashing by Exploiting Related-key Differentials

Xiaoyang Dong, Zhiyu Zhang, Siwei Sun, Congming Wei, Xiaoyun Wang, and Lei Hu


Collision attacks on AES-like hashing (hash functions constructed by plugging AES-like ciphers or permutations into the famous PGV modes or their variants) can be reduced to the problem of finding a pair of inputs respecting a differential of the underlying AES-like primitive whose input and output differences are the same. The rebound attack due to Mendel et al. is a powerful tool for achieving this goal, whose quantum version was first considered by Hosoyamada and Sasaki at EUROCRYPT 2020. In this work, we automate the process of searching for the configurations of rebound attacks by taking related-key differentials of the underlying block cipher into account with the MILP-based approach. In the quantum setting, our model guide the search towards characteristics that minimize the resources (e.g., QRAM) and complexities of the resulting rebound attacks. We apply our method to Saturnin-hash, SKINNY, and Whirlpool and improved results are obtained.

Available format(s)
Secret-key cryptography
Publication info
A major revision of an IACR publication in ASIACRYPT 2021
Quantum computationCollision attacksRebound attacksSaturninSKINNYWhirlpoolMILP
Contact author(s)
xiaoyangdong @ tsinghua edu cn
zhangzhiyu @ iie ac cn
siweisun isaac @ gmail com
wcm16 @ tsinghua edu cn
xiaoyunwang @ tsinghua edu cn
hulei @ iie ac cn
2021-09-03: revised
2021-09-03: received
See all versions
Short URL
Creative Commons Attribution


      author = {Xiaoyang Dong and Zhiyu Zhang and Siwei Sun and Congming Wei and Xiaoyun Wang and Lei Hu},
      title = {Automatic Classical and Quantum Rebound Attacks on AES-like Hashing by Exploiting Related-key Differentials},
      howpublished = {Cryptology ePrint Archive, Paper 2021/1119},
      year = {2021},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.