Blender - Revision history

Fmendel: Huge Multicollisions and Multipreimages of Hash Functions BLENDER-n

2009-01-08T13:43:22Z

Huge Multicollisions and Multipreimages of Hash Functions BLENDER-n

Mschlaeffer: /* Cryptanalysis */

2008-12-29T20:00:47Z

‎Cryptanalysis

Mschlaeffer: /* Cryptanalysis */

2008-12-29T19:45:24Z

‎Cryptanalysis

Mschlaeffer: /* Cryptanalysis */

2008-12-29T19:41:36Z

‎Cryptanalysis

Mschlaeffer: /* Cryptanalysis */

2008-12-29T19:41:14Z

‎Cryptanalysis

Mschlaeffer: /* Cryptanalysis */

2008-12-29T19:40:02Z

‎Cryptanalysis

Mlamberger: /* Cryptanalysis */

2008-12-22T09:26:21Z

‎Cryptanalysis

Mlamberger: /* Cryptanalysis */

2008-12-22T09:26:03Z

‎Cryptanalysis

JAumasson: Newbold's attack on Blender added

2008-12-20T19:36:37Z

Newbold's attack on Blender added

Mlamberger: /* Cryptanalysis */

2008-12-20T16:56:37Z

‎Cryptanalysis

@@ Line 25: / Line 25: @@
 | Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference
 |-
 | style="background:orange" | preimage || hash || all ||  || n*2<sup>(n+w)/2</sup> || - || [http://ehash.iaik.tugraz.at/uploads/2/20/Observations_on_Blender.pdf Newbold]
 |-
@@ Line 37: / Line 41: @@
 A description of this table is given [http://ehash.iaik.tugraz.at/wiki/Cryptanalysis_Categories#Individual_Hash_Function_Tables here].
 <bibtex>

← Older revision		Revision as of 20:00, 29 December 2008
Line 35:		Line 35:
	\|}		\|}

−	A ~~detailed~~ description of this table is given [http://ehash.iaik.tugraz.at/wiki/Cryptanalysis_Categories#Individual_Hash_Function_Tables here].	+	A description of this table is given [http://ehash.iaik.tugraz.at/wiki/Cryptanalysis_Categories#Individual_Hash_Function_Tables here].

@@ Line 24: / Line 24: @@
 |- style="background:#efefef;"
 | Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference
 |-
 | style="background:orange" | preimage || hash || all ||  || n*2<sup>n/2</sup> || - || [http://ehash.iaik.tugraz.at/uploads/4/48/Blender-preimage.pdf Mendel]
@@ Line 30: / Line 32: @@
 |-
 | semi-free start collision || hash || all ||  || example || - || [http://eprint.iacr.org/2008/532.pdf Xu]
 |-
 |}

@@ Line 21: / Line 21: @@
 == Cryptanalysis ==
-{| border="1" cellpadding="4" cellspacing="0" align="center" class="wikitable" style="text-align:center"
+{| border="1" cellpadding="4" cellspacing="0" class="wikitable" style="text-align:center"
 |- style="background:#efefef;"
 | Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference

@@ Line 23: / Line 23: @@
 {| border="1" cellpadding="4" cellspacing="0" align="center" class="wikitable" style="text-align:center"
 |- style="background:#efefef;"
-| Hash Function Name ||   Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference
+| Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference
 |-
-| Blender || style="background:orange" | preimage || hash || all ||  || n*2<sup>n/2</sup> || - || [http://ehash.iaik.tugraz.at/uploads/4/48/Blender-preimage.pdf Mendel]
+| style="background:orange" | preimage || hash || all ||  || n*2<sup>n/2</sup> || - || [http://ehash.iaik.tugraz.at/uploads/4/48/Blender-preimage.pdf Mendel]
 |-
-| Blender ||  | near-collision || hash || all ||  || example || - || [http://cryptography.hyperlink.cz/BMW/near_collision_blender.pdf Klima]
+| near-collision || hash || all ||  || example || - || [http://cryptography.hyperlink.cz/BMW/near_collision_blender.pdf Klima]
 |-
-| Blender ||  | semi-free start collision || hash || all ||  || example || - || [http://eprint.iacr.org/2008/532.pdf Xu]
+| semi-free start collision || hash || all ||  || example || - || [http://eprint.iacr.org/2008/532.pdf Xu]
 |-
-| Blender || style="background:orange" | preimage || hash || all ||  || n*2<sup>(n+w)/2</sup> || - || [http://ehash.iaik.tugraz.at/uploads/2/20/Observations_on_Blender.pdf Newbold]
+| style="background:orange" | preimage || hash || all ||  || n*2<sup>(n+w)/2</sup> || - || [http://ehash.iaik.tugraz.at/uploads/2/20/Observations_on_Blender.pdf Newbold]
 |-
 |}
@@ Line 58: / Line 58: @@
+}
 </bibtex>
 <bibtex>
@@ Line 73: / Line 72: @@
+}
 </bibtex>
 <bibtex>
@@ Line 84: / Line 82: @@
+}
 </bibtex>
 <bibtex>

← Older revision		Revision as of 19:40, 29 December 2008
Line 20:		Line 20:

	== Cryptanalysis ==		== Cryptanalysis ==
		+
		+	{\| border="1" cellpadding="4" cellspacing="0" align="center" class="wikitable" style="text-align:center"
		+	\|- style="background:#efefef;"
		+	\| Hash Function Name \|\| Type of Analysis \|\| Hash Function Part \|\| Hash Size (n) \|\| Parameters/Variants \|\| Compression Function Calls \|\| Memory Requirements \|\| Reference
		+	\|-
		+	\| Blender \|\| style="background:orange" \| preimage \|\| hash \|\| all \|\| \|\| n*2<sup>n/2</sup> \|\| - \|\| [http://ehash.iaik.tugraz.at/uploads/4/48/Blender-preimage.pdf Mendel]
		+	\|-
		+	\| Blender \|\| \| near-collision \|\| hash \|\| all \|\| \|\| example \|\| - \|\| [http://cryptography.hyperlink.cz/BMW/near_collision_blender.pdf Klima]
		+	\|-
		+	\| Blender \|\| \| semi-free start collision \|\| hash \|\| all \|\| \|\| example \|\| - \|\| [http://eprint.iacr.org/2008/532.pdf Xu]
		+	\|-
		+	\| Blender \|\| style="background:orange" \| preimage \|\| hash \|\| all \|\| \|\| n*2<sup>(n+w)/2</sup> \|\| - \|\| [http://ehash.iaik.tugraz.at/uploads/2/20/Observations_on_Blender.pdf Newbold]
		+	\|-
		+	\|}
		+
		+	A detailed description of this table is given [http://ehash.iaik.tugraz.at/wiki/Cryptanalysis_Categories#Individual_Hash_Function_Tables here].
		+

	<bibtex>		<bibtex>

@@ Line 20: / Line 20: @@
 == Cryptanalysis ==
 <bibtex>
@@ Line 51: / Line 72: @@
    author    = {Liangyu Xu},
    title     = {Semi-free start collision attack on Blender},
    howpublished = {Available online},
-   url = {http://ehash.iaik.tugraz.at/uploads/2/20/Observations_on_Blender.pdf},
+   url       = {http://eprint.iacr.org/2008/532.pdf},
    year      = {2008},
-   abstract = {51 candidates have been accepted as ﬁrst round candidates in NIST‘s
+   abstract  = {Blender is a cryptographic hash function submitted to NIST’s SHA3 competition. We
-SHA-3 competition, to decide the new cryptographic hash standard. Many
+have found a semi-free start collision attack on Blender with trivial complexity. One pair of
-of these submissions have no external cryptanalysis published, so the task
+semi-free start collision messages with zero initial values is presented.},
+}
 </bibtex>

@@ Line 28: / Line 28: @@
    howpublished = {Available Online},
    abstract = {In this paper, we present a preimage attack on the hash function Blender for
-all output sizes. It has a complexity of about $n\cdot 2^{n/2}$ and negligible
+all output sizes. It has a complexity of about n*2^(n/2) and negligible
 memory requirements. The attack is based on structural weaknesses in the design
 of the hash function and is independent of the underlying compression function.},