NDLI: On hash functions using checksums

Content Provider	Springer Nature Link
Author	Gauravaram, Praveen Kelsey, John Knudsen, Lars R. Thomsen, Søren S.
Copyright Year	2009
Abstract	We analyse the security of iterated hash functions that compute an input dependent checksum which is processed as part of the hash computation. We show that a large class of such schemes, including those using non-linear or even one-way checksum functions, is not secure against the second preimage attack of Kelsey and Schneier, the herding attack of Kelsey and Kohno and the multicollision attack of Joux. Our attacks also apply to a large class of cascaded hash functions. Our second preimage attacks on the cascaded hash functions improve the results of Joux presented at Crypto’04. We also apply our attacks to the MD2 and GOST hash functions. Our second preimage attacks on the MD2 and GOST hash functions improve the previous best known short-cut second preimage attacks on these hash functions by factors of at least 226 and 254, respectively. Our herding and multicollision attacks on the hash functions based on generic checksum functions (e.g., one-way) are a special case of the attacks on the cascaded iterated hash functions previously analysed by Dunkelman and Preneel and are not better than their attacks. On hash functions with easily invertible checksums, our multicollision and herding attacks (if the hash value is short as in MD2) are more efficient than those of Dunkelman and Preneel.
Starting Page	137
Ending Page	151
Page Count	15
File Format	PDF
ISSN	16155262
Journal	International Journal of Information Security
Volume Number	9
Issue Number	2
e-ISSN	16155270
Language	English
Publisher	Springer-Verlag
Publisher Date	2009-12-31
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Iterated hash functions Checksums Generic attacks Communications Engineering, Networks Management of Computing and Information Systems Coding and Information Theory Operating Systems Computer Communication Networks Data Encryption
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Safety, Risk, Reliability and Quality Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

The parazoa family: generalizing the sponge hash functions

Generic constructions for role-based encryption

On security arguments of the second round SHA-3 candidates

Interactive two-channel message authentication based on Interactive-Collision Resistant hash functions

Improving cache attacks by considering cipher structure

Hybrid authentication based on noisy channels

On the security of the WinRAR encryption feature

Sufficient conditions for sound tree and sequential hashing modes

Certificate revocation system implementation based on the Merkle hash tree

On hash functions using checksums

Similar Documents

The parazoa family: generalizing the sponge hash functions

Generic constructions for role-based encryption

On security arguments of the second round SHA-3 candidates

Interactive two-channel message authentication based on Interactive-Collision Resistant hash functions

Improving cache attacks by considering cipher structure

Hybrid authentication based on noisy channels

On the security of the WinRAR encryption feature

Sufficient conditions for sound tree and sequential hashing modes

Certificate revocation system implementation based on the Merkle hash tree

On hash functions using checksums