Wang's (et al) differential attack works on MD5, MD4, RIPEMD and HAVAL.
Why doesn't it work on SHA-1?
12
$\begingroup$
$\endgroup$
-
$\begingroup$ The website sites.google.com/site/itstheshappening has the details of another attack on SHA-1 from Marc Stevens (CWI, the Netherlands), Pierre Karpman (Inria, France and NTU Singapore) and Thomas Peyrin (NTU Singapore). $\endgroup$ – kodlu Dec 23 '16 at 3:12
6
$\begingroup$
$\endgroup$
The message expansion step in SHA-1. The compression functions for MD4,MD5, RIPEMD and I think HAVAL only re-arrange and re-use words in the message block.
SHA-1 will expand the message from 16 words to 80 words using a rotation and XOR operation. The additional 64 words are a function of every word of the message block.
Because of this additional dependence on previous words in the block, Wang's attack will not work.
Not the answer you're looking for? Browse other questions tagged hash cryptanalysis collision-resistance sha-1 attack or ask your own question.
|
asked |
|
|
viewed |
256 times |
|
active |
Hot Network Questions
- What does the view outside my ship traveling at light speed look like?
- Why appending box dimensions to a sequence (in a loop) makes that sequence only contain duplicates of last dimension?
- Why were helmets and other body armour not commonplace in the 1800s?
- How to make a crossed out \leftrightarrow?
- How strong are Wi-Fi signals?
- What is the object moving across the ceiling in this stock footage?
- Tic-tac-toe for the terminal, written in C
- Which is the common name of Mind Flayers?
- Should breaking down something like a door be adjudicated as an attempt to beat its AC and HP, or as an ability check against a set DC?
- Looking for a soft substance that doesn't dissolve underwater
- How can I find where certain bash function is defined?
- Is this resistor leaking? If so, is it a concern?
- Ticket sales for Queen at the Live Aid
- Is there a public standard for 8 and 10 character grid locators?
- Newly created fields are not being displayed
- Is there a down side to setting the sampling time of a SAR ADC as long as possible?
- Could a 19.25mm revolver actually exist?
- What are the real benefits of using Salesforce DX?
- Cross validation Vs. Train Validate Test
- Is it possible to play as a necromancer skeleton?
- Why is desire the root of suffering?
- Placing bypass capacitors after VCC reaches the IC
- Does Nitrogen inside commercial airliner wheels prevent blowouts on touchdown?
- How should I introduce map drawing to my players?
