Attacks on hash functions based on generalized feistel: Application to reduced-round lesamnta and SHAvite-3 512

Charles Bouillaguet; Orr Dunkelman; Gaëan Leurent; Pierre Alain Fouque

doi:10.1007/978-3-642-19574-7_2

Attacks on hash functions based on generalized feistel: Application to reduced-round lesamnta and SHAvite-3 ₅₁₂

Charles Bouillaguet, Orr Dunkelman, Gaëan Leurent, Pierre Alain Fouque

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

In this paper we study the strength of two hash functions which are based on Generalized Feistels. We describe a new kind of attack based on a cancellation property in the round function. This new technique allows to efficiently use the degrees of freedom available to attack a hash function. Using the cancellation property, we can avoid the non-linear parts of the round function, at the expense of some freedom degrees. Our attacks are mostly independent of the round function in use, and can be applied to similar hash functions which share the same structure but have different round functions. We start with a 22-round generic attack on the structure of Lesamnta, and adapt it to the actual round function to attack 24-round Lesamnta (the full function has 32 rounds). We follow with an attack on 9-round SHAvite-3 ₅₁₂ which also works for the tweaked version of SHAvite-3 ₅₁₂.

Original language	English
Title of host publication	Selected Areas in Cryptography - 17th International Workshop, SAC 2010, Revised Selected Papers
Pages	18-35
Number of pages	18
DOIs	https://doi.org/10.1007/978-3-642-19574-7_2
State	Published - 2011
Externally published	Yes
Event	17th International Workshop on Selected Areas in Cryptography, SAC 2010 - Waterloo, ON, Canada Duration: 12 Aug 2010 → 13 Aug 2010

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	6544 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	17th International Workshop on Selected Areas in Cryptography, SAC 2010
Country/Territory	Canada
City	Waterloo, ON
Period	12/08/10 → 13/08/10

ASJC Scopus subject areas

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-642-19574-7_2

Cite this

Bouillaguet, C., Dunkelman, O., Leurent, G., & Fouque, P. A. (2011). Attacks on hash functions based on generalized feistel: Application to reduced-round lesamnta and SHAvite-3 ₅₁₂. In Selected Areas in Cryptography - 17th International Workshop, SAC 2010, Revised Selected Papers (pp. 18-35). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 6544 LNCS). https://doi.org/10.1007/978-3-642-19574-7_2

Bouillaguet, Charles ; Dunkelman, Orr ; Leurent, Gaëan et al. / Attacks on hash functions based on generalized feistel : Application to reduced-round lesamnta and SHAvite-3 ₅₁₂. Selected Areas in Cryptography - 17th International Workshop, SAC 2010, Revised Selected Papers. 2011. pp. 18-35 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{dbc29e2dde2c468994cc1a6d354b8b96,

title = "Attacks on hash functions based on generalized feistel: Application to reduced-round lesamnta and SHAvite-3 512",

abstract = "In this paper we study the strength of two hash functions which are based on Generalized Feistels. We describe a new kind of attack based on a cancellation property in the round function. This new technique allows to efficiently use the degrees of freedom available to attack a hash function. Using the cancellation property, we can avoid the non-linear parts of the round function, at the expense of some freedom degrees. Our attacks are mostly independent of the round function in use, and can be applied to similar hash functions which share the same structure but have different round functions. We start with a 22-round generic attack on the structure of Lesamnta, and adapt it to the actual round function to attack 24-round Lesamnta (the full function has 32 rounds). We follow with an attack on 9-round SHAvite-3 512 which also works for the tweaked version of SHAvite-3 512.",

author = "Charles Bouillaguet and Orr Dunkelman and Ga{\"e}an Leurent and Fouque, {Pierre Alain}",

year = "2011",

doi = "10.1007/978-3-642-19574-7_2",

language = "English",

isbn = "9783642195730",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

pages = "18--35",

booktitle = "Selected Areas in Cryptography - 17th International Workshop, SAC 2010, Revised Selected Papers",

note = "17th International Workshop on Selected Areas in Cryptography, SAC 2010 ; Conference date: 12-08-2010 Through 13-08-2010",

}

Bouillaguet, C, Dunkelman, O, Leurent, G & Fouque, PA 2011, Attacks on hash functions based on generalized feistel: Application to reduced-round lesamnta and SHAvite-3 ₅₁₂. in Selected Areas in Cryptography - 17th International Workshop, SAC 2010, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 6544 LNCS, pp. 18-35, 17th International Workshop on Selected Areas in Cryptography, SAC 2010, Waterloo, ON, Canada, 12/08/10. https://doi.org/10.1007/978-3-642-19574-7_2

Attacks on hash functions based on generalized feistel: Application to reduced-round lesamnta and SHAvite-3 ₅₁₂. / Bouillaguet, Charles; Dunkelman, Orr; Leurent, Gaëan et al.
Selected Areas in Cryptography - 17th International Workshop, SAC 2010, Revised Selected Papers. 2011. p. 18-35 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 6544 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Attacks on hash functions based on generalized feistel

T2 - 17th International Workshop on Selected Areas in Cryptography, SAC 2010

AU - Bouillaguet, Charles

AU - Dunkelman, Orr

AU - Leurent, Gaëan

AU - Fouque, Pierre Alain

PY - 2011

Y1 - 2011

N2 - In this paper we study the strength of two hash functions which are based on Generalized Feistels. We describe a new kind of attack based on a cancellation property in the round function. This new technique allows to efficiently use the degrees of freedom available to attack a hash function. Using the cancellation property, we can avoid the non-linear parts of the round function, at the expense of some freedom degrees. Our attacks are mostly independent of the round function in use, and can be applied to similar hash functions which share the same structure but have different round functions. We start with a 22-round generic attack on the structure of Lesamnta, and adapt it to the actual round function to attack 24-round Lesamnta (the full function has 32 rounds). We follow with an attack on 9-round SHAvite-3 512 which also works for the tweaked version of SHAvite-3 512.

AB - In this paper we study the strength of two hash functions which are based on Generalized Feistels. We describe a new kind of attack based on a cancellation property in the round function. This new technique allows to efficiently use the degrees of freedom available to attack a hash function. Using the cancellation property, we can avoid the non-linear parts of the round function, at the expense of some freedom degrees. Our attacks are mostly independent of the round function in use, and can be applied to similar hash functions which share the same structure but have different round functions. We start with a 22-round generic attack on the structure of Lesamnta, and adapt it to the actual round function to attack 24-round Lesamnta (the full function has 32 rounds). We follow with an attack on 9-round SHAvite-3 512 which also works for the tweaked version of SHAvite-3 512.

UR - http://www.scopus.com/inward/record.url?scp=79952592898&partnerID=8YFLogxK

U2 - 10.1007/978-3-642-19574-7_2

DO - 10.1007/978-3-642-19574-7_2

M3 - Conference contribution

AN - SCOPUS:79952592898

SN - 9783642195730

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 18

EP - 35

BT - Selected Areas in Cryptography - 17th International Workshop, SAC 2010, Revised Selected Papers

Y2 - 12 August 2010 through 13 August 2010

ER -

Bouillaguet C, Dunkelman O, Leurent G, Fouque PA. Attacks on hash functions based on generalized feistel: Application to reduced-round lesamnta and SHAvite-3 ₅₁₂. In Selected Areas in Cryptography - 17th International Workshop, SAC 2010, Revised Selected Papers. 2011. p. 18-35. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-642-19574-7_2