Abstract:Cryptographic hash functions obtained by iterating a round function constructed from a block cipher and for which the hash-code length is twice the block length m of the underlying block cipher are considered. The computational security of such hash functions against two particular attacks, namely, the free-start target and free-start collision attacks, is investigated; these two attacks differentiate themselves from the "usual" target and collision attacks by not specifying the initial value of the iterations. The motivation is that computationally secure iterated hash functions against these two particular attacks implies computationally secure iterated hash functions against the "usual" target and collision attacks. For a general class of such 2m-bit iterated hash functions, tighter upper bounds than the one yet published in the literature on the complexity of free-start target and free-start collision attacks are derived. A proposal for a 2m-bit iterated hash function achieving these upper bounds is made; this new proposal is shown to be computationally more secure against free-start target and free-start collision attacks than some of the already proposed schemes falling into this general class. It is also shown that our proposal is better than the present proposal for an ISO standard in the sense that both schemes achieve these upper bounds but one encryption is required in our proposal for hashing one m-bit message block as opposed to two encryptions in the ISO proposal. Finally, two new attacks on the LOKI Double-Block-Hash function are presented with lower complexities than the known ones.

A Secure Hash Function MD-192 With Modified Message Expansion

A secured Cryptographic Hashing Algorithm

Secure and robust image perceptual hashing

Collision Attack For The Hash Function Extended Md4

Cryptanalysis of the Hash Functions MD4 and RIPEMD

HF-hash : Hash Functions Using Restricted HFE Challenge-1

An Efficient Cryptographic Hash Algorithm (BSA)

An Attack on Hash Function HAVAL-128

How to Break MD5 and Other Hash Functions

An Efficient Security Hash Function in DAA

Collision Attack on the Full Extended MD4 and Pseudo-Preimage Attack on RIPEMD

Improved Cryptanalysis on RIPEMD-128

Construction and security analysis of hash algorithm based on stream cipher

Analysis of RIPEMD-160: New Collision Attacks and Finding Characteristics with MILP.

A 2D Cryptographic Hash Function Incorporating Homomorphic Encryption for Secure Digital Signatures

A New Non-MDS Hash Function Resisting Birthday Attack and Meet-in-the-middle Attack

Towards a Better Approximation of Full Domain Hash - or - The Reef and Shoal Integrity Arrangement

New Message Differences for Collision Attacks on MD4 and MD5

Design Theory and Method of Multivariate Hash Function

Breaking a New Hash Function Design Strategy Called SMASH

Security of iterated hash functions based on block ciphers