Abstract:Cryptographic hash functions play a crucial role in ensuring data security, generating fixed-length hashes from variable-length inputs. The hash function SHA-256 is trusted for data security due to its resilience after over twenty years of intense scrutiny. One of its critical properties is collision resistance, meaning that it is infeasible to find two different inputs with the same hash. Currently, the best SHA-256 collision attacks use differential cryptanalysis to find collisions in simplified versions of SHA-256 that are reduced to have fewer steps, making it feasible to find collisions. In this paper, we use a satisfiability (SAT) solver as a tool to search for step-reduced SHA-256 collisions, and dynamically guide the solver with the aid of a computer algebra system (CAS) used to detect inconsistencies and deduce information that the solver would otherwise not detect on its own. Our hybrid SAT + CAS solver significantly outperformed a pure SAT approach, enabling us to find collisions in step-reduced SHA-256 with significantly more steps. Using SAT + CAS, we find a 38-step collision of SHA-256 with a modified initialization vector -- something first found by a highly sophisticated search tool of Mendel, Nad, and Schläffer. Conversely, a pure SAT approach could find collisions for no more than 28 steps. However, our work only uses the SAT solver CaDiCaL and its programmatic interface IPASIR-UP.

Cryptanalysis on SHA 1

Finding collisions in the full SHA-1

How to Break MD5 and Other Hash Functions

Efficient collision search attacks on SHA-0

Cryptanalysis of the Hash Functions MD4 and RIPEMD

Improved Cryptanalysis on RIPEMD-128

An Attack on Hash Function HAVAL-128

The second-preimage attack on MD4

Distinguishing Attack On Secret Prefix Mac Instantiated With Reduced Sha-1

Efficient collision search attacks on SHA-0.

Search framework for neutral bits and boomerangs in SHA-1 collision attacks.

Study the function of building blocks in SHA Family

Meaningful Collision Attack on MD4

SHA-256 Collision Attack with Programmatic SAT

Multi-Collision Attack On The Compression Functions Of Md4 And 3-Pass Haval

A New Non-MDS Hash Function Resisting Birthday Attack and Meet-in-the-middle Attack

Improved Cryptanalysis of Step-Reduced SM3

Cryptanalysis of the full HAVAL with 4 and 5 passes

SHA-1 Design in Smart Card Chip

Persistence Wears down Resistance: Persistent Fault Analysis on Unprotected and Protected Block Cipher Implementations (Extended Abstract)

MultiCollision Attack on the Compression Functions of MD4 and 3-Pass HAVAL.