Abstract:The hash function RIPEMD-160 is an ISO/IEC standard and is being used to generate the bitcoin address together with SHA-256. Despite the fact that many hash functions in the MD-SHA hash family have been broken, RIPEMD-160 remains secure and the best collision attack could only reach up to 34 out of 80 rounds, which was published at CRYPTO 2019. In this paper, we propose a new collision attack on RIPEMD-160 that can reach up to 36 rounds with time complexity $$2^{64.5}$$ . This new attack is facilitated by a new strategy to choose the message differences and new techniques to simultaneously handle the differential conditions on both branches. Moreover, different from all the previous work on RIPEMD-160, we utilize a MILP-based method to search for differential characteristics, where we construct a model to accurately describe the signed difference transitions through its round function. As far as we know, this is the first model targeting the signed difference transitions for the MD-SHA hash family. Indeed, we are more motivated to design this model by the fact that many automatic tools to search for such differential characteristics are not publicly available and implementing them from scratch is too time-consuming and difficult. Hence, we expect that this can be an alternative easy tool for future research, which only requires to write down some simple linear inequalities.

Collision Attack For The Hash Function Extended Md4

Collision Attack on the Full Extended MD4 and Pseudo-Preimage Attack on RIPEMD

Cryptanalysis of the Hash Functions MD4 and RIPEMD

How to Break MD5 and Other Hash Functions

Improved Collision Attack on Hash Function MD5

Multi-Collision Attack On The Compression Functions Of Md4 And 3-Pass Haval

Near-Collision Attacks on MD4: Applied to MD4-Based Protocols.

Practical Collision Attack on 40-Step RIPEMD-128.

New Message Differences for Collision Attacks on MD4 and MD5

A New Collision Attack On Md5

Improved Cryptanalysis on RIPEMD-128

MultiCollision Attack on the Compression Functions of MD4 and 3-Pass HAVAL.

Differential Fault Analysis on the MD5 Compression Function

New Message Difference for Md4

An Attack on Hash Function HAVAL-128

Analysis of RIPEMD-160: New Collision Attacks and Finding Characteristics with MILP.

A Secure Hash Function MD-192 With Modified Message Expansion

Cryptanalysis of 4-Pass HAVAL.

A Fast Attack Algorithm on the MD5 Hash Function

Breaking a New Hash Function Design Strategy Called SMASH

Preimage Attack on Hash Function RIPEMD