6
$\begingroup$

In other words, has there ever been a point in time in which having the content of a message has actually helped break a hash function?

$\endgroup$
  • 2
    $\begingroup$ Clearly having the message content could help. It has helped in some theoretical attacks (see here). Not sure if it has ever helped in practical situations. $\endgroup$ – mikeazo Apr 15 '14 at 17:30
8
$\begingroup$

Yes, it has happened. If you look at the SHA3 hash zoo, there are a number of hashes who has the best attack listed as "2nd preimage".

One general place this can occur is if you have a hash function with a weak message compression step, but a fairly strong finalization step. Here, we might not be able to generate first preimages (because we don't know what needs to be presented to the finalization step to generate that image), but we may be able to do a second preimage (because we attack the weak message compression, and generate the exact same data to the finalization).

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.