Abstract:Recently, Hosoyamada and Sasaki (EUROCRYPT 2020), and Xiaoyang Dong et al. (ASIACRYPT 2020) proposed quantum collision attacks against AES-like hashing modes AES-MMO and AES-MP. Their collision attacks are based on the quantum version of the rebound attack technique exploiting the differential trails whose probabilities are too low to be useful in the classical setting but large enough in the quantum setting. In this work, we present dedicated quantum free-start collision attacks on Hirose’s double block length compression function instantiated with AES-256, namely HCF-AES-256. The best publicly known classical attack against HCF-AES-256 covers up to 9 out of 14 rounds. We present a new 10-round differential trail for HCF-AES-256 with probability 2−160, and use it to find collisions with a quantum version of the rebound attack. Our attack succeeds with a time complexity of 285.11 and requires 216 qRAM in the quantum-attack setting, where an attacker can make only classical queries to the oracle and perform offline computations. We also present a quantum free-start collision attack on HCF-AES-256 with a time complexity of 286.07 which outperforms Chailloux, Naya-Plasencia, and Schrottenloher’s generic quantum collision attack (ASIACRYPT 2017) in a model when large qRAM is not available.

Fully Quantum Hash Function

Hash Function Based on Quantum Walks

Hash Function Based on Controlled Alternate Quantum Walks with Memory (september 2021)

Quantum hash function based on continuous quantum walks

A Stable Hash Function Based on Parity-dependent Quantum Walks with Memory (August 2023)

Controlled Alternate Quantum Walks based Quantum Hash Function

Quantum-inspired Hash Function Based on Parity-dependent Quantum Walks with Memory

A Quantum-Resistant Photonic Hash Function

On the Concept of Cryptographic Quantum Hashing

Hash Function Based on Quantum Walks with Two-Step Memory.

Quantum hashing algorithm implementation

Controlled Alternate Quantum Walk based Block Hash Function

Discrete-time interacting quantum walks and quantum Hash schemes

Automated Quantum Circuit Generation for Computing Inverse Hash Functions

Post-quantum hash functions using

A quantum hash function with grouped coarse-grained boson sampling

Quantum Collision Resistance of Double-Block-Length Hashing

Designing Hash and Encryption Engines using Quantum Computing

Post-quantum hash functions using $\mathrm{SL}_n(\mathbb{F}_p)$

Quantum Free-Start Collision Attacks on Double Block Length Hashing with Round-Reduced AES-256

Trustworthy Quantum Computation through Quantum Physical Unclonable Functions