Difference between revisions of "MD4"

@@ Line 89: / Line 89: @@
 === Second Preimage Attacks ===
+<bibtex>
+@inproceedings{fseDobbertin98,
+  owner     = {tnad},
+  author    = {Hans Dobbertin},
+  title     = {The First Two Rounds of MD4 are Not One-Way},
+  pages     = {284-292},
+  editor    = {Serge Vaudenay},
+  booktitle = {FSE},
+  publisher = {Springer},
+  series    = {LNCS},
+  volume    = {1372},
+  year      = {1998},
+  isbn      = {3-540-64265-X},
+  abstract  = {In [1] it was shown that there are very effective attacks leading
+               to collisions for the hash function MD4 designed by R. Rivest [3].
+               A summary of the status of hash functions of the MD4-family with respect to
+               collision-resistence can be found in [2] and [4]. However, attacking the one-wayness
+               of a hash function is a much more demanding challenge, and in case of success it has much more devastating
+               consequences. No result along this line is known for MD4 and its
+               successors. Therefore it is worth to explore how the recently developed
+               new analytic methods for finding collisions can be applied to construct
+               preimages or second preimages. As a first step, we state here the following partial result.},
+  url       = {http://dx.doi.org/10.1007/3-540-69710-1_19}
+}
+</bibtex>
 ----

Revision as of 18:45, 10 March 2008