Abstract:Many hash-based authentication protocols have been proposed, and proven secure assuming that underlying hash functions are secure. On the other hand, if a hash function compromises, the security of authentication protocols based on this hash function becomes unclear. Therefore, it is significantly important to verify the security of hash-based protocols when a hash function is broken.In this paper, we will re-evaluate the security of two MD5-based authentication protocols based on a fact that MD5 cannot satisfy a required fundamental property named collision resistance. The target protocols are APOP (Authenticated Post Office Protocol) and NMAC (Nested Message Authentication Code), since they or their variants are widely used in real world. For security evaluation of APOP, we will propose a modified password recovery attack procedure, which is twice as fast as previous attacks. Moreover, our attack is more realistic, as the probability of being detected is lower than that of previous attacks. For security evaluation of MD5-based NMAC, we will propose a new key-recovery attack procedure, which has a complexity lower than that of previous attack. The complexity of our attack is 2(76), while that of previous attack is 2(100).**Moreover, our attack has another interesting point. NMAC has two keys: the inner key and the outer key. Our attack can recover the outer key partially without the knowledge of the inner key.

A New Collision Attack On Md5

New Message Differences for Collision Attacks on MD4 and MD5

How to Break MD5 and Other Hash Functions

Improved Collision Attack on Hash Function MD5

New Message Difference for Md4

A Fast Attack Algorithm on the MD5 Hash Function

Differential Fault Analysis on the MD5 Compression Function

Collision Attack For The Hash Function Extended Md4

The second-preimage attack on MD4

Improved Collision Detection of MD5 Using Sufficient Condition Combination

Differential Cryptanalysis Of Hash Functions Based On Evolutionary Computing

Near-Collision Attacks on MD4: Applied to MD4-Based Protocols.

Cryptanalysis of the Hash Functions MD4 and RIPEMD

Exploration of Key Points for Attack of MD5 Algorithm

MultiCollision Attack on the Compression Functions of MD4 and 3-Pass HAVAL.

Multi-Collision Attack On The Compression Functions Of Md4 And 3-Pass Haval

Analysis of RIPEMD-160: New Collision Attacks and Finding Characteristics with MILP.

Collision Attack on the Full Extended MD4 and Pseudo-Preimage Attack on RIPEMD

Meaningful Collision Attack on MD4

Cryptanalysis of Two MD5-Based Authentication Protocols: APOP and NMAC.

A Secure Hash Function MD-192 With Modified Message Expansion