Cryptanalysis of dynamic SHA(2)

Jean Philippe Aumasson; Orr Dunkelman; Sebastiaan Indesteege; Bart Preneel

doi:10.1007/978-3-642-05445-7_26

Cryptanalysis of dynamic SHA(2)

Jean Philippe Aumasson, Orr Dunkelman, Sebastiaan Indesteege, Bart Preneel

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

In this paper, we analyze the hash functions Dynamic SHA and Dynamic SHA2, which have been selected as first round candidates in the NIST hash function competition. These hash functions rely heavily on data-dependent rotations, similar to certain block ciphers, e.g., RC5. Our analysis suggests that in the case of hash functions, where the attacker has more control over the rotations, this approach is less favorable than in block ciphers. We present practical, or close to practical, collision attacks on both Dynamic SHA and Dynamic SHA2. Moreover, we present a preimage attack on Dynamic SHA that is faster than exhaustive search.

Original language	English
Title of host publication	Selected Areas in Cryptography - 16th Annual International Workshop, SAC 2009, Revised Selected Papers
Pages	415-432
Number of pages	18
DOIs	https://doi.org/10.1007/978-3-642-05445-7_26
State	Published - 2009
Externally published	Yes
Event	16th Annual International Workshop on Selected Areas in Cryptography, SAC 2009 - Calgary, AB, Canada Duration: 13 Aug 2009 → 14 Aug 2009

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	5867 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	16th Annual International Workshop on Selected Areas in Cryptography, SAC 2009
Country/Territory	Canada
City	Calgary, AB
Period	13/08/09 → 14/08/09

Keywords

Collision attack
Dynamic SHA
Dynamic SHA2
Hash function
SHA-3 candidate

ASJC Scopus subject areas

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-642-05445-7_26

Cite this

Aumasson, J. P., Dunkelman, O., Indesteege, S., & Preneel, B. (2009). Cryptanalysis of dynamic SHA(2). In Selected Areas in Cryptography - 16th Annual International Workshop, SAC 2009, Revised Selected Papers (pp. 415-432). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 5867 LNCS). https://doi.org/10.1007/978-3-642-05445-7_26

@inproceedings{6256a5cfbac64321ba14856ace033b42,

title = "Cryptanalysis of dynamic SHA(2)",

abstract = "In this paper, we analyze the hash functions Dynamic SHA and Dynamic SHA2, which have been selected as first round candidates in the NIST hash function competition. These hash functions rely heavily on data-dependent rotations, similar to certain block ciphers, e.g., RC5. Our analysis suggests that in the case of hash functions, where the attacker has more control over the rotations, this approach is less favorable than in block ciphers. We present practical, or close to practical, collision attacks on both Dynamic SHA and Dynamic SHA2. Moreover, we present a preimage attack on Dynamic SHA that is faster than exhaustive search.",

keywords = "Collision attack, Dynamic SHA, Dynamic SHA2, Hash function, SHA-3 candidate",

author = "Aumasson, {Jean Philippe} and Orr Dunkelman and Sebastiaan Indesteege and Bart Preneel",

year = "2009",

doi = "10.1007/978-3-642-05445-7_26",

language = "English",

isbn = "3642054439",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

pages = "415--432",

booktitle = "Selected Areas in Cryptography - 16th Annual International Workshop, SAC 2009, Revised Selected Papers",

note = "16th Annual International Workshop on Selected Areas in Cryptography, SAC 2009 ; Conference date: 13-08-2009 Through 14-08-2009",

}

Aumasson, JP, Dunkelman, O, Indesteege, S & Preneel, B 2009, Cryptanalysis of dynamic SHA(2). in Selected Areas in Cryptography - 16th Annual International Workshop, SAC 2009, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 5867 LNCS, pp. 415-432, 16th Annual International Workshop on Selected Areas in Cryptography, SAC 2009, Calgary, AB, Canada, 13/08/09. https://doi.org/10.1007/978-3-642-05445-7_26

Cryptanalysis of dynamic SHA(2). / Aumasson, Jean Philippe; Dunkelman, Orr; Indesteege, Sebastiaan et al.
Selected Areas in Cryptography - 16th Annual International Workshop, SAC 2009, Revised Selected Papers. 2009. p. 415-432 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 5867 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Cryptanalysis of dynamic SHA(2)

AU - Aumasson, Jean Philippe

AU - Dunkelman, Orr

AU - Indesteege, Sebastiaan

AU - Preneel, Bart

PY - 2009

Y1 - 2009

N2 - In this paper, we analyze the hash functions Dynamic SHA and Dynamic SHA2, which have been selected as first round candidates in the NIST hash function competition. These hash functions rely heavily on data-dependent rotations, similar to certain block ciphers, e.g., RC5. Our analysis suggests that in the case of hash functions, where the attacker has more control over the rotations, this approach is less favorable than in block ciphers. We present practical, or close to practical, collision attacks on both Dynamic SHA and Dynamic SHA2. Moreover, we present a preimage attack on Dynamic SHA that is faster than exhaustive search.

AB - In this paper, we analyze the hash functions Dynamic SHA and Dynamic SHA2, which have been selected as first round candidates in the NIST hash function competition. These hash functions rely heavily on data-dependent rotations, similar to certain block ciphers, e.g., RC5. Our analysis suggests that in the case of hash functions, where the attacker has more control over the rotations, this approach is less favorable than in block ciphers. We present practical, or close to practical, collision attacks on both Dynamic SHA and Dynamic SHA2. Moreover, we present a preimage attack on Dynamic SHA that is faster than exhaustive search.

KW - Collision attack

KW - Dynamic SHA

KW - Dynamic SHA2

KW - Hash function

KW - SHA-3 candidate

UR - http://www.scopus.com/inward/record.url?scp=70549086854&partnerID=8YFLogxK

U2 - 10.1007/978-3-642-05445-7_26

DO - 10.1007/978-3-642-05445-7_26

M3 - Conference contribution

AN - SCOPUS:70549086854

SN - 3642054439

SN - 9783642054433

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 415

EP - 432

BT - Selected Areas in Cryptography - 16th Annual International Workshop, SAC 2009, Revised Selected Papers

T2 - 16th Annual International Workshop on Selected Areas in Cryptography, SAC 2009

Y2 - 13 August 2009 through 14 August 2009

ER -

Aumasson JP, Dunkelman O, Indesteege S, Preneel B. Cryptanalysis of dynamic SHA(2). In Selected Areas in Cryptography - 16th Annual International Workshop, SAC 2009, Revised Selected Papers. 2009. p. 415-432. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-642-05445-7_26

Cryptanalysis of dynamic SHA(2)

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this