Abstract:Cryptographic hash functions obtained by iterating a round function constructed from a block cipher and for which the hash-code length is twice the block length m of the underlying block cipher are considered. The computational security of such hash functions against two particular attacks, namely, the free-start target and free-start collision attacks, is investigated; these two attacks differentiate themselves from the "usual" target and collision attacks by not specifying the initial value of the iterations. The motivation is that computationally secure iterated hash functions against these two particular attacks implies computationally secure iterated hash functions against the "usual" target and collision attacks. For a general class of such 2m-bit iterated hash functions, tighter upper bounds than the one yet published in the literature on the complexity of free-start target and free-start collision attacks are derived. A proposal for a 2m-bit iterated hash function achieving these upper bounds is made; this new proposal is shown to be computationally more secure against free-start target and free-start collision attacks than some of the already proposed schemes falling into this general class. It is also shown that our proposal is better than the present proposal for an ISO standard in the sense that both schemes achieve these upper bounds but one encryption is required in our proposal for hashing one m-bit message block as opposed to two encryptions in the ISO proposal. Finally, two new attacks on the LOKI Double-Block-Hash function are presented with lower complexities than the known ones.

Attacks on a Double Length Blockcipher-Based Hash Proposal

On the Design of Secure and Fast Double Block Length Hash Functions

Attacks on Fast Double Block Length Hash Functions

New Attacks on All Double Block Length Hash Functions of Hash Rate 1, Including the Parallel-DM.

Cryptanalysis of Lin et al.'s Efficient Block-Cipher-Based Hash Function

On the Security of Double-Block-Length Hash Functions with Rate 1

Security of iterated hash functions based on block ciphers

Hash Functions Based on Block Ciphers

More Insights on Blockcipher-Based Hash Functions.

Construction and security analysis of hash algorithm based on stream cipher

Quantum Collision Resistance of Double-Block-Length Hashing

Quantum Free-Start Collision Attacks on Double Block Length Hashing with Round-Reduced AES-256

What is the Effective Key Length for a Block Cipher: an Attack on Every Practical Block Cipher

An Attack on Hash Function HAVAL-128

Side-Channel Collision Attack Based on Multiple-Bits

Improved Collision Attack on Hash Function MD5

A New Non-MDS Hash Function Resisting Birthday Attack and Meet-in-the-middle Attack

Multi-Collision Attack On The Compression Functions Of Md4 And 3-Pass Haval

Chosen-Key Distinguishers on 12-Round Feistel-SP and 11-Round Collision Attacks on Its Hashing Modes

Quantum cryptanalysis of the full AES-256-based Davies–Meyer, Hirose and MJH hash functions

Near-Collision Attacks on MD4: Applied to MD4-Based Protocols.