International Workshop on Fast Software Encryption

FSE 2010: Fast Software Encryption pp 116-133

Finding Preimages of Tiger Up to 23 Steps

  • Lei Wang
  • Yu Sasaki
Conference paper

DOI: 10.1007/978-3-642-13858-4_7

Volume 6147 of the book series Lecture Notes in Computer Science (LNCS)

Abstract

This paper evaluates the preimage resistance of the Tiger hash function. We will propose a pseudo-preimage attack on its compression function up to 23 steps with a complexity of 2181, which can be converted to a preimage attack on 23-step Tiger hash function with a complexity of 2187.5. The memory requirement of these attacks is 222 words. Our pseudo-preimage attack on the Tiger compression function adopts the meet-in-the-middle approach. We will divide the computation of the Tiger compression function into two independent parts. This enables us to transform the target of finding a pseudo-preimage to another target of finding a collision between two independent sets of some internal state, which will reduce the complexity. In order to maximize the number of the attacked steps, we derived several properties or weaknesses in both the key schedule function and the step function of the Tiger compression function, which gives us more freedom to separate the Tiger compression function.

Keywords

Tigerhash functionmeet-in-the-middlepreimage attackindependent chunks
Download to read the full conference paper text

Copyright information

© Springer-Verlag Berlin Heidelberg 2010

Authors and Affiliations

  • Lei Wang
    • 1
  • Yu Sasaki
    • 2
  1. 1.The University of Electro-CommunicationsTokyoJapan
  2. 2.NTT Information Sharing Platform LaboratoriesNTT CorporationTokyoJapan