Abstract:Even though meet-in-the-middle preimage attack framework has been successfully applied to attack most of narrow-pipe hash functions, it seems difficult to apply this framework to attack double-branch hash functions. Only few results have been published on this research. This paper proposes a refined strategy of applying meet-in-the-middle attack framework to double-branch hash functions. The main novelty is a new local-collision approach named one-message-word local collision. We have applied our strategy to two double-branch hash functions RIPEMD and RIPEMD-128, and obtain the following results.On RIPEMD, We find a pseudo-preimage attack on 47-step compression function, where the full version has 48 steps, with a complexity of 2(119). It can be converted to a second preimage attack on 47-step hash function with a complexity of 2(124.5). Moreover, we also improve previous preimage attacks on (intermediate) 35-step RIPEMD, and reduce the complexity from 2(113) to 2(96).On RIPEMD-128, We find a pseudo-preimage on (intermediate) 36-step compression function, where the full version has 64 steps, with a complexity of 2(123). It can1 be converted to a preimage attack on (intermediate) 36-step hash function with a complexity of 2(126.5).Both RIPEMD and RIPEMD-128 produce 128-bit digests. Therefore our attacks are faster than the brute-force attack, which means that our attacks break the theoretical security bound of the above step-reduced variants of those two hash functions in the sense of (second) preimage resistance. The maximum number of the attacked steps on both those two hash functions is 35 among previous works based to our best knowledge. Therefore we have successfully increased the number of the attacked steps. We stress that our attacks does not break the security of full-version RIPEMD and RIPEMD-128. But the security mergin of RIPEMD becomes very narrow. On the other hand, RIPEMD-128 still has enough security margin.

Investigating Fundamental Security Requirements on Whirlpool : Improved Preimage and Collision Attacks

Security Analysis of the Whirlpool Hash Function in the Cloud of Things.

Improved Attacks Against Reduced-Round Whirlwind

Differential and Correlation Power Analysis Attacks on HMAC-Whirlpool

Improved Cryptanalysis of Step-Reduced SM3

Snowball: Another View on Side-Channel Key Recovery Tools.

Differential Fault Analysis on the MD5 Compression Function

Multi-Collision Attack On The Compression Functions Of Md4 And 3-Pass Haval

Improved Cryptanalysis on RIPEMD-128

Meet-in-the-Middle (second) Preimage Attacks on Two Double-Branch Hash Functions RIPEMD and RIPEMD-128.

Meet-In-The-Middle Preimage Attacks Revisited New Results On Md5 And Haval

Partial-Collision Attack on the Round-Reduced Compression Function of Skein-256.

Equivalent Key Recovery Attacks Against Hmac and Nmac with Whirlpool Reduced to 7 Rounds

Boomerang Distinguishers for Full HAS-160 Compression Function.

Improved Boomerang Attacks on SM3.

Cryptanalysis of HMAC/NMAC-Whirlpool.

How to Break MD5 and Other Hash Functions

Distinguishers beyond three rounds of the RIPEMD-128/-160 compression functions

Distinguishers on Double-Branch Compression Function and Applications to Round-Reduced RIPEMD-128 and RIPEMD-160

Cryptanalysis Of The Compression Function Of Simd