Improved Collision Attack on MD4 with Probability Almost 1

  • Yusuke Naito
  • Yu Sasaki
  • Noboru Kunihiro
  • Kazuo Ohta
Conference paper

DOI: 10.1007/11734727_12

Volume 3935 of the book series Lecture Notes in Computer Science (LNCS)
Cite this paper as:
Naito Y., Sasaki Y., Kunihiro N., Ohta K. (2006) Improved Collision Attack on MD4 with Probability Almost 1. In: Won D.H., Kim S. (eds) Information Security and Cryptology - ICISC 2005. ICISC 2005. Lecture Notes in Computer Science, vol 3935. Springer, Berlin, Heidelberg

Abstract

In EUROCRYPT2005, a collision attack on MD4 was proposed by Wang, Lai, Chen, and Yu. They claimed that collision messages were found with probability 2− 6 to 2− 2, and the complexity was less than 28 MD4 hash operations. However, there were some tyops and oversights in their paper. In this paper, first, we reevaluate the exact success probability. Second, we point out the typos and oversights in the paper of Wang et al, and we show how to improve them. Third, we propose a new message modification method for the third round of MD4. From the first result, we reevaluate that the method of Wang et al. can find collision messages with success probability 2− 5.61. From the second result, we can find collision messages with success probability 2− 2. Also by combining the second result and the third result, our improved method is able to find collision messages with probability almost 1. This complexity is less than 3 repetitions of MD4 hash operations. Our improved method is about 85 times as fast as the method of Wang et al.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2006

Authors and Affiliations

  • Yusuke Naito
    • 1
  • Yu Sasaki
    • 1
  • Noboru Kunihiro
    • 1
  • Kazuo Ohta
    • 1
  1. 1.The University of Electro-CommunicationsTokyoJapan