International Conference on the Theory and Application of Cryptology and Information Security

ASIACRYPT 2009: Advances in Cryptology – ASIACRYPT 2009 pp 560-577

Linearization Framework for Collision Attacks: Application to CubeHash and MD6

  • Eric Brier
  • Shahram Khazaei
  • Willi Meier
  • Thomas Peyrin
Conference paper

DOI: 10.1007/978-3-642-10366-7_33

Volume 5912 of the book series Lecture Notes in Computer Science (LNCS)
Cite this paper as:
Brier E., Khazaei S., Meier W., Peyrin T. (2009) Linearization Framework for Collision Attacks: Application to CubeHash and MD6. In: Matsui M. (eds) Advances in Cryptology – ASIACRYPT 2009. ASIACRYPT 2009. Lecture Notes in Computer Science, vol 5912. Springer, Berlin, Heidelberg

Abstract

In this paper, an improved differential cryptanalysis framework for finding collisions in hash functions is provided. Its principle is based on linearization of compression functions in order to find low weight differential characteristics as initiated by Chabaud and Joux. This is formalized and refined however in several ways: for the problem of finding a conforming message pair whose differential trail follows a linear trail, a condition function is introduced so that finding a collision is equivalent to finding a preimage of the zero vector under the condition function. Then, the dependency table concept shows how much influence every input bit of the condition function has on each output bit. Careful analysis of the dependency table reveals degrees of freedom that can be exploited in accelerated preimage reconstruction under the condition function. These concepts are applied to an in-depth collision analysis of reduced-round versions of the two SHA-3 candidates CubeHash and MD6, and are demonstrated to give by far the best currently known collision attacks on these SHA-3 candidates.

Keywords

Hash functionscollisionsdifferential attackSHA-3CubeHash and MD6
Download to read the full conference paper text

Copyright information

© Springer-Verlag Berlin Heidelberg 2009

Authors and Affiliations

  • Eric Brier
    • 1
  • Shahram Khazaei
    • 2
  • Willi Meier
    • 3
  • Thomas Peyrin
    • 1
  1. 1.IngenicoFrance
  2. 2.EPFLSwitzerland
  3. 3.FHNWSwitzerland