Difference between revisions of "MD5"

@@ Line 21: / Line 21: @@
 === Collision Attacks ===
+<bibtex>
+@inproceedings{fseLeurent07,
+  author    = {Ga&euml;tan Leurent},
+  title     = {Message Freedom in MD4 and MD5 Collisions: Application to APOP},
+  pages     = {309-328},
+  url        = {http://dx.doi.org/10.1007/978-3-540-74619-5_20},
+  editor    = {Alex Biryukov},
+  booktitle = {FSE},
+  publisher = {Springer},
+  series    = {LNCS},
+  volume    = {4593},
+  year      = {2007},
+  isbn      = {978-3-540-74617-1},
+  abstract  = {In Wang’s attack, message modifications allow to
+deterministically satisfy certain sufficient conditions to find
+collisions efficiently. Unfortunately, message modifications
+significantly change the messages and one has little control
+over the colliding blocks. In this paper, we show how to choose
+small parts of the colliding messages. Consequently, we break a
+security countermeasure proposed by Szydlo and Yin at CT-RSA ’06,
+where a fixed padding is added at the end of each block. Furthermore,
+we also apply this technique to recover part of the passwords in the
+Authentication Protocol of the Post Office Protocol (POP). This shows
+that collision attacks can be used to attack real protocols, which means that finding collisions is a real threat.}
+}
+</bibtex>
 <bibtex>
 @inproceedings{eurocryptStevensLW07,

Revision as of 12:12, 11 March 2008