Abstract:Recently, Hosoyamada and Sasaki (Eurocrypt'20) proposed dedicated quantum collision attacks on AES-MMO and AES-MP and revealed that a differential trail that is not available in the classical setting due to a low probability can be utilized in the quantum settings. Their works encouraged cryptographers to actively perform security analysis of concrete hash functions in the quantum settings, which had not received much attention before. Xiaoyang Dong et al. (Asiacrypt'20) proposed improved dedicated quantum collision attacks on AES-MMO and AES-MP, and Chauhan et al. (ToSC'21) proposed quantum rebound attacks on the double-block-length hash function Hirose instantiated with 10-round reduced AES-256. In this paper, we propose a quantum collision attack on the Davies–Meyer (DM) hash function instantiated with full-round AES-256. We construct a new chosen-key differential trail for AES-256 based on the trail of Biryukov et al. proposed in 2009 and use it to find collisions of the full AES-256-based DM in a quantum setting. We also present quantum free-start collision attacks on the Hirose and MJH hash functions instantiated with full-round AES-256. These attacks are significant in that they are the first algorithms to find full-round (free-start) collisions. In particular, in the case of Hirose-AES-256, our attacks can cover a larger number of constant c than previously proposed attacks and also cover more rounds.

Improved Attacks Against Reduced-Round Whirlwind

Improved Boomerang Attacks on Round-Reduced SM3 and Keyed Permutation of BLAKE-256

Classical and Quantum Meet-in-the-Middle Nostradamus Attacks on AES-like Hashing

Partial-Collision Attack on the Round-Reduced Compression Function of Skein-256.

Improved Preimage Attacks on 4-Round Keccak-224/256

Preimage Attacks on 4-Round Keccak by Solving Multivariate Quadratic Systems

Quantum Free-Start Collision Attacks on Double Block Length Hashing with Round-Reduced AES-256

Improved Preimage Attacks on 3-Round Keccak-224/256.

Multi-Collision Attack On The Compression Functions Of Md4 And 3-Pass Haval

Differential and Correlation Power Analysis Attacks on HMAC-Whirlpool

Improved MITM Cryptanalysis on Streebog

Improved Meet-in-the-Middle Nostradamus Attacks on AES-like Hashing

Improved Cryptanalysis of Step-Reduced SM3

Improved related-key boomerang attacks on round-reduced threefish-512

Impossible Differential Attack On Reduced-Round Twine

Quantum Collision Resistance of Double-Block-Length Hashing

On quantum preimage attacks

Improved Boomerang Attacks on SM3.

Quantum cryptanalysis of the full AES-256-based Davies–Meyer, Hirose and MJH hash functions

Differential-Aided Preimage Attacks On Round-Reduced Keccak

Improved Cryptanalysis on RIPEMD-128