Difference between revisions of "FFT-Hash I"
From The ECRYPT Hash Function Website
(→Spezification) |
Mschlaeffer (talk | contribs) |
||
| Line 21: | Line 21: | ||
=== Collision Attacks === | === Collision Attacks === | ||
| + | |||
| + | <bibtex> | ||
| + | @INPROCEEDINGS{DBLP:conf/eurocrypt/BaritaudGG92, | ||
| + | author = {Thierry Baritaud and Henri Gilbert and Marc Girault}, | ||
| + | title = {FFT Hashing is not Collision-free}, | ||
| + | booktitle = {EUROCRYPT}, | ||
| + | year = {1992}, | ||
| + | pages = {35-44}, | ||
| + | abstract = {The FFT Hashing Function proposed by C.P. Schnorr [1] hashes messages | ||
| + | of arbitrary length into a 128-bit hash value. In this paper, we | ||
| + | show that this function is not collision free, and we give an example | ||
| + | of two distinct 256-bit messages with the same hash value. Finding | ||
| + | a collision (in fact a large family of, colliding messages) requires | ||
| + | approximately 223 partial computations of the hash function, and | ||
| + | takes a few hours on a SUN3- workstation, and less than an hour on | ||
| + | a SPARC-workstation. A similar result discovered independently has | ||
| + | been announced at the Asiacrypt’91 rump session by Daemen-Bosselaers-Govaerts-Vandewalle | ||
| + | [2].}, | ||
| + | bibsource = {DBLP, http://dblp.uni-trier.de}, | ||
| + | url = {http://link.springer.de/link/service/series/0558/bibs/0658/06580035.htm} | ||
| + | } | ||
| + | </bibtex> | ||
| + | |||
| + | |||
---- | ---- | ||
Revision as of 12:02, 11 March 2008
Contents
1 Specification
2 Cryptanalysis
2.1 Best Known Results
2.2 Generic Attacks
2.3 Collision Attacks
Thierry Baritaud, Henri Gilbert, Marc Girault - FFT Hashing is not Collision-free
- EUROCRYPT pp. 35-44,1992
- http://link.springer.de/link/service/series/0558/bibs/0658/06580035.htm
BibtexAuthor : Thierry Baritaud, Henri Gilbert, Marc Girault
Title : FFT Hashing is not Collision-free
In : EUROCRYPT -
Address :
Date : 1992