chapter

Preimage Attacks on One-Block MD4, 63-Step MD5 and More

Authors:

Selected Areas in Cryptography: 15th International Workshop, SAC 2008, Sackville, New Brunswick, Canada, August 14-15, Revised Selected Papers

August 2009

Pages 103 - 119

https://doi.org/10.1007/978-3-642-04159-4_7

Published: 23 August 2009 Publication History

Abstract

This paper shows preimage attacks on one-block MD4 and MD5 reduced to 63 (out of 64) steps. Our attacks are based on the meet-in-the-middle attack, and many additional improvements make the preimage computable faster than that of the brute-force attack, 2¹²⁸ hash computation. A preimage of one-block MD4 can be computed in the complexity of the 2¹⁰⁷ MD4 compression function computation, and a preimage of MD5 reduced to 63 steps can be computed in the complexity of the 2¹²¹ MD5 compression function computation. Moreover, we optimize the computational order of the brute-force attack against MD5, and a preimage of full-round MD5 can be computed in the complexity of the 2¹²⁷ MD5 compression function computation.

Cited By

View all

Dong XZhao BQin LHou QZhang SWang X(2024)Generic MitM Attack Frameworks on Sponge ConstructionsAdvances in Cryptology – CRYPTO 202410.1007/978-3-031-68385-5_1(3-37)Online publication date: 18-Aug-2024
https://dl.acm.org/doi/10.1007/978-3-031-68385-5_1
Chen SGuo JList EShi DZhang T(2024)Diving Deep into the Preimage Security of AES-Like HashingAdvances in Cryptology – EUROCRYPT 202410.1007/978-3-031-58716-0_14(398-426)Online publication date: 26-May-2024
https://dl.acm.org/doi/10.1007/978-3-031-58716-0_14
Ahmadian ZKhalesi AM’Foukh DMoghimi HNaya-Plasencia M(2024)Improved Differential Meet-in-the-Middle CryptanalysisAdvances in Cryptology – EUROCRYPT 202410.1007/978-3-031-58716-0_10(280-309)Online publication date: 26-May-2024
https://dl.acm.org/doi/10.1007/978-3-031-58716-0_10
Show More Cited By

Recommendations

Preimage Attacks on 3, 4, and 5-Pass HAVAL
ASIACRYPT '08: Proceedings of the 14th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology

This paper proposes preimage attacks on hash function HAVAL whose output length is 256 bits. This paper has three main contributions; a preimage attack on 3-pass HAVAL at the complexity of 2²²⁵, a preimage attack on 4-pass HAVAL at the complexity of 2^...
MD4 is Not One-Way
Fast Software Encryption

MD4 is a hash function introduced by Rivest in 1990. It is still used in some contexts, and the most commonly used hash functions (MD5, Sha1, Sha2) are based on the design principles of MD4. MD4 has been extensively studied and very efficient collision ...
Improved preimage attack on one-block MD4

MD4 is a hash function designed by Rivest in 1990. The design philosophy of many important hash functions, such as MD5, SHA-1 and SHA-2, originated from that of MD4. We propose an improved preimage attack on one-block MD4 with the time complexity 2^9^5 ...

Comments

Information & Contributors

Information

Published In

Selected Areas in Cryptography: 15th International Workshop, SAC 2008, Sackville, New Brunswick, Canada, August 14-15, Revised Selected Papers

August 2009

456 pages

ISBN:9783642041587

Editors:
Roberto Maria Avanzi
Faculty of Mathematics and Horst Görtz Institute for IT-Security, Ruhr University Bochum, Germany
,
Liam Keliher
Department of Mathematics and Computer Science, Mount Allison University, Sackville, Canada
,
Francesco Sica
Department of Mathematics and Computer Science, Mount Allison University --- AceCrypt, Sackville, Canada E4L 1E6

Publisher

Springer-Verlag

Berlin, Heidelberg

Publication History

Published: 23 August 2009

Author Tags

Qualifiers

Chapter

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

55
Total Citations
View Citations
0
Total Downloads

Downloads (Last 12 months)0
Downloads (Last 6 weeks)0

Reflects downloads up to 01 Feb 2025

Other Metrics

View Author Metrics

Citations

Cited By

View all

Dong XZhao BQin LHou QZhang SWang X(2024)Generic MitM Attack Frameworks on Sponge ConstructionsAdvances in Cryptology – CRYPTO 202410.1007/978-3-031-68385-5_1(3-37)Online publication date: 18-Aug-2024
https://dl.acm.org/doi/10.1007/978-3-031-68385-5_1
Chen SGuo JList EShi DZhang T(2024)Diving Deep into the Preimage Security of AES-Like HashingAdvances in Cryptology – EUROCRYPT 202410.1007/978-3-031-58716-0_14(398-426)Online publication date: 26-May-2024
https://dl.acm.org/doi/10.1007/978-3-031-58716-0_14
Ahmadian ZKhalesi AM’Foukh DMoghimi HNaya-Plasencia M(2024)Improved Differential Meet-in-the-Middle CryptanalysisAdvances in Cryptology – EUROCRYPT 202410.1007/978-3-031-58716-0_10(280-309)Online publication date: 26-May-2024
https://dl.acm.org/doi/10.1007/978-3-031-58716-0_10
Hou QDong XQin LZhang GWang X(2023)Automated Meet-in-the-Middle Attack Goes to FeistelAdvances in Cryptology – ASIACRYPT 202310.1007/978-981-99-8727-6_13(370-404)Online publication date: 4-Dec-2023
https://dl.acm.org/doi/10.1007/978-981-99-8727-6_13
Zhang T(2023)Comprehensive Preimage Security Evaluations on Rijndael-Based HashingApplied Cryptography and Network Security Workshops10.1007/978-3-031-41181-6_2(23-42)Online publication date: 19-Jun-2023
https://dl.acm.org/doi/10.1007/978-3-031-41181-6_2
Boura CDavid NDerbez PLeander GNaya-Plasencia M(2023)Differential Meet-In-The-Middle CryptanalysisAdvances in Cryptology – CRYPTO 202310.1007/978-3-031-38548-3_9(240-272)Online publication date: 20-Aug-2023
https://dl.acm.org/doi/10.1007/978-3-031-38548-3_9
Qin LHua JDong XYan HWang X(2023)Meet-in-the-Middle Preimage Attacks on Sponge-Based HashingAdvances in Cryptology – EUROCRYPT 202310.1007/978-3-031-30634-1_6(158-188)Online publication date: 23-Apr-2023
https://dl.acm.org/doi/10.1007/978-3-031-30634-1_6
Qin LDong XWang AHua JWang X(2022)Mind the TWEAKEY Schedule: Cryptanalysis on SKINNYe-64-256Advances in Cryptology – ASIACRYPT 202210.1007/978-3-031-22963-3_10(287-317)Online publication date: 5-Dec-2022
https://dl.acm.org/doi/10.1007/978-3-031-22963-3_10
Schrottenloher AStevens M(2022)Simplified MITM Modeling for Permutations: New (Quantum) AttacksAdvances in Cryptology – CRYPTO 202210.1007/978-3-031-15982-4_24(717-747)Online publication date: 15-Aug-2022
https://dl.acm.org/doi/10.1007/978-3-031-15982-4_24
Bao ZGuo JShi DTu Y(2022)Superposition Meet-in-the-Middle Attacks: Updates on Fundamental Security of AES-like HashingAdvances in Cryptology – CRYPTO 202210.1007/978-3-031-15802-5_3(64-93)Online publication date: 15-Aug-2022
https://dl.acm.org/doi/10.1007/978-3-031-15802-5_3
Show More Cited By

Abstract

Cited By

Recommendations

Preimage Attacks on 3, 4, and 5-Pass HAVAL

MD4 is Not One-Way

Improved preimage attack on one-block MD4

Comments

Information

Published In

Publisher

Publication History

Author Tags

Qualifiers

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

View options

Share

Share this Publication link

Share on social media

Affiliations