I'm researching on the SHA-1 algorithm and looking for reasons why it has fallen prey to differential cryptanalysis. I have read the research papers by Merc Stevens and Wang both of which describe how to attack and reduce the complexity of the attack on sha1 but none provide a way to reduce its vulnerability. Please help me out by explaining how to increase the strength of a hash function against differential cryptanalysis.

  • $\begingroup$ Anything missing from the given answer, dear new user? It's been a while. $\endgroup$
    – Maarten Bodewes
    Commented Oct 19, 2014 at 16:17

1 Answer 1


Probably the biggest vulnerability is that the message expansion is too linear. The linearity of the SHA-1 message expansion is why we are able to find such good differential paths. There can be differences at the beginning of the message and by the end of the message expansion they are mostly canceled out.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.