RIPEMD with two-round compress function is not collision-free

被引：46

作者：

Dobbertin, H

机构：

[1] German Information Security Agency, D-53133 Bonn

来源：

JOURNAL OF CRYPTOLOGY | 1997年 / 10卷 / 01期

关键词：

dedicated hash functions; RIPEMD; MD4; RACE project; ISO/IEC; 10118-3;

D O I：

10.1007/s001459900019

中图分类号：

TP301 [理论、方法];

学科分类号：

081202 ;

摘要：

In 1990 Rivest introduced the cryptographic hash function MD4. The compress function of MD4 has three rounds. After partial attacks against MD4 were found, the stronger mode RIPEMD was designed as a European proposal in 1992 (RACE project). Its compress function consists of two parallel lines of modified versions of MD4-compress. RIPEMD is currently being considered to became an international standard (ISO/IEC Draft 10118-3). However, in this paper an attack against RIPEMD is described, which leads to comparable results with the previously known attacks against MD4: The reduced versions of RIPEMD, where the first or the last round of the compress function is omitted, are not collision-free. Moreover, it turns out that the methods developed in this note can be applied to find collisions for the full MD4.

引用

页码：51 / 69

页数：19