Abstract:Extended MD4 is a hash function proposed by Rivest in 1990 with a 256-bit hash value. The compression function consists of two different and independent parallel lines called Left Line and Right Line, and each line has 48 steps. The initial values of Left Line and Right Line are denoted by IV0 and IV1 respectively. Dobbertin proposed a collision attack for the compression function of Extended MD4 with a complexity of about 2(40) under the condition that the value for IV0 = IV1 is prescribed. In this paper, we gave a collision attack on the full Extended MD4 with a complexity of about 2(37). Firstly, we propose a collision differential path for both lines by choosing a proper message difference, and deduce a set of sufficient conditions that ensure the differential path hold. Then by using some precise message modification techniques to improve the success probability of the attack, we find two-block collisions of Extended MD4 with less than 2(37) computations. This work provides a new reference to the collision analysis of other hash functions such as RIPEMD-160 etc. which consist of two lines.

An Attack on Hash Function HAVAL-128

Cryptanalysis of 4-Pass HAVAL.

Cryptanalysis of the full HAVAL with 4 and 5 passes

Preimage Attack on 104-step Hash Function HAVAL

Collision Attack For The Hash Function Extended Md4

Multi-Collision Attack On The Compression Functions Of Md4 And 3-Pass Haval

MultiCollision Attack on the Compression Functions of MD4 and 3-Pass HAVAL.

Improved Preimage Attack on 3-Pass HAVAL

Breaking a New Hash Function Design Strategy Called SMASH

Cryptanalysis of the Hash Functions MD4 and RIPEMD

How to Break MD5 and Other Hash Functions

Improved Collision Attack on Hash Function MD5

Second Preimage Attack on 5-Pass HAVAL and Partial Key-Recovery Attack on HMAC/NMAC-5-Pass HAVAL

Algebraic Fault Attack on the SHA-256 Compression Function

A Secure Hash Function MD-192 With Modified Message Expansion

Meet-In-The-Middle Preimage Attacks Revisited New Results On Md5 And Haval

Construction and security analysis of hash algorithm based on stream cipher

A New Non-MDS Hash Function Resisting Birthday Attack and Meet-in-the-middle Attack

A Fast Attack Algorithm on the MD5 Hash Function

Collision Attacks on NaSHA-384/512.

Collision attack on NaSHA-384/512