Difference between revisions of "RIPEMD"
From The ECRYPT Hash Function Website
| Line 1: | Line 1: | ||
| == Specification == | == Specification == | ||
| − | + | ||
| − | * digest size:  | + | * digest size: 128 bits | 
| * max. message length: < 2<sup>64</sup> bits | * max. message length: < 2<sup>64</sup> bits | ||
| − | * compression function: 512-bit message block,  | + | * compression function: 512-bit message block, 2 streams with each 128-bit chaining variable | 
| * Specification:   | * Specification:   | ||
| − | + | ||
| == Cryptanalysis == | == Cryptanalysis == | ||
Revision as of 18:03, 10 March 2008
Contents
1 Specification
- digest size: 128 bits
- max. message length: < 264 bits
- compression function: 512-bit message block, 2 streams with each 128-bit chaining variable
- Specification:
2 Cryptanalysis
2.1 Best Known Results
2.2 Generic Attacks
2.3 Collision Attacks
Hans Dobbertin - {RIPEMD with Two-Round Compress Function is Not Collision-Free}
- J. Cryptology 10(1):51-70,1997
- http://dx.doi.org/10.1007/s001459900019
 BibtexAuthor : Hans Dobbertin
 Title : {RIPEMD with Two-Round Compress Function is Not Collision-Free}
 In : J. Cryptology -
 Address :
 Date : 1997
