SHAvite-3 - Revision history

Mschlaeffer at 12:54, 5 July 2010

2010-07-05T12:54:44Z

JAumasson: added Gligoroski's paper

2010-05-27T12:27:34Z

added Gligoroski's paper

JAumasson: correct placement of rec sec par

2010-04-29T07:21:11Z

correct placement of rec sec par

Mschlaeffer: added: Cryptanalysis of the 10-Round Hash and Full Compression Function of SHAvite-3-512

2010-03-24T11:56:02Z

added: Cryptanalysis of the 10-Round Hash and Full Compression Function of SHAvite-3-512

Fmendel at 07:57, 16 February 2010

2010-02-16T07:57:54Z

Fmendel: Attacks on Hash Functions based on Generalized Feistel - Application to Reduced-Round Lesamnta and SHAvite-3

2010-02-15T10:19:11Z

Attacks on Hash Functions based on Generalized Feistel - Application to Reduced-Round Lesamnta and SHAvite-3

Fmendel at 10:03, 15 February 2010

2010-02-15T10:03:14Z

Mschlaeffer at 22:18, 29 January 2010

2010-01-29T22:18:51Z

Mschlaeffer: separate cryptanalysis tables

2010-01-29T21:06:29Z

separate cryptanalysis tables

Fmendel: fixed typo

2009-11-24T08:16:25Z

fixed typo

@@ Line 41: / Line 41: @@
 Here we list results on the hash function according to the NIST requirements. The only allowed modification is to change the security parameter.
-{| border="1" cellpadding="4" cellspacing="0" class="wikitable" style="text-align:center"
+{| border="1" cellpadding="4" cellspacing="0" class="wikitable sortable" style="text-align:center"
 |- style="background:#efefef;"
 | Type of Analysis || Hash Size (n) || Parameters || Compression Function Calls || Memory Requirements ||   Reference
@@ Line 58: / Line 58: @@
 Note that these results assume more direct control or access over some internal variables (aka. free-start, pseudo, compression function, block cipher, or permutation attacks).
-{| border="1" cellpadding="4" cellspacing="0" class="wikitable" style="text-align:center"
+{| border="1" cellpadding="4" cellspacing="0" class="wikitable sortable" style="text-align:center"
 |- style="background:#efefef;"
 |   Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference

@@ Line 62: / Line 62: @@
 |   Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference
 |-
 | pseudo-preimage || compression || 512 || 14 rounds || 2<sup>384+s</sup> || 2<sup>128-s</sup> || [http://online.tu-graz.ac.at/tug_online/voe_main2.getvolltext?pCurrPk=49974 Gauravaram et al.]
 |-
@@ Line 76: / Line 78: @@
 |}
 <bibtex>

@@ Line 35: / Line 35: @@
 A description of the tables is given [http://ehash.iaik.tugraz.at/wiki/Cryptanalysis_Categories#Individual_Hash_Function_Tables here].
 === Hash function ===
 Here we list results on the hash function according to the NIST requirements. The only allowed modification is to change the security parameter.
 {| border="1" cellpadding="4" cellspacing="0" class="wikitable" style="text-align:center"
@@ Line 58: / Line 57: @@
 Note that these results assume more direct control or access over some internal variables (aka. free-start, pseudo, compression function, block cipher, or permutation attacks).
 {| border="1" cellpadding="4" cellspacing="0" class="wikitable" style="text-align:center"

@@ Line 45: / Line 45: @@
 |- style="background:#efefef;"
 | Type of Analysis || Hash Size (n) || Parameters || Compression Function Calls || Memory Requirements ||   Reference
 |-
 | second preimage || 512 || 9 rounds || 2<sup>496</sup> || 2<sup>16</sup> || [http://eprint.iacr.org/2009/634.pdf Bouillaguet et al.]
@@ Line 56: / Line 58: @@
 Note that these results assume more direct control or access over some internal variables (aka. free-start, pseudo, compression function, block cipher, or permutation attacks).
 {| border="1" cellpadding="4" cellspacing="0" class="wikitable" style="text-align:center"
@@ Line 61: / Line 65: @@
 |   Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference
 |-
 | pseudo-collision || compression || all || full (Round 1) ||  ||  || [http://ehash.iaik.tugraz.at/uploads/e/ea/Peyrin-SHAvite-3.txt Peyrin]
 |-
@@ Line 71: / Line 79: @@
 |}
 <bibtex>
 @misc{cryptoeprint:2009:634,
-     author = {Charles Bouillaguet and Orr Dunkelman and Ga\"etan Leurent and Pierre-Alain Fouque},
+     author = {Charles Bouillaguet and Orr Dunkelman and Gaëtan Leurent and Pierre-Alain Fouque},
      title = {Attacks on Hash Functions based on Generalized Feistel - Application to Reduced-Round Lesamnta and SHAvite-3_{512}},
      howpublished = {Cryptology ePrint Archive, Report 2009/634},

@@ Line 38: / Line 38: @@
 === Hash function ===
-Here we list results on the actual hash function. The only allowed modification is to change the security parameter.
+Here we list results on the hash function according to the NIST requirements. The only allowed modification is to change the security parameter.
 Recommended security parameter: '''12''' rounds (n=224,256); '''14''' rounds (n=384,512)

@@ Line 46: / Line 46: @@
 | Type of Analysis || Hash Size (n) || Parameters || Compression Function Calls || Memory Requirements ||   Reference
 |-
-| || || || || ||
+| second preimage || 512 || 9 rounds || 2<sup>496</sup> || 2<sup>16</sup> || [http://eprint.iacr.org/2009/634.pdf Bouillaguet et al.]
 |-
 |}
@@ Line 60: / Line 60: @@
 |- style="background:#efefef;"
 |   Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference
 |-
-|   | pseudo-collision || compression || all || full (Round 1) ||  ||  || [http://ehash.iaik.tugraz.at/uploads/e/ea/Peyrin-SHAvite-3.txt Peyrin]
+| pseudo-collision || compression || all || full (Round 1) ||  ||  || [http://ehash.iaik.tugraz.at/uploads/e/ea/Peyrin-SHAvite-3.txt Peyrin]
 |-
-|   | pseudo-collision || compression || 256 || full (Round 1) ||  ||  || [http://ehash.iaik.tugraz.at/uploads/5/5c/NandiP-SHAvite-3.txt Nandi,Paul]
+| pseudo-collision || compression || 256 || full (Round 1) ||  ||  || [http://ehash.iaik.tugraz.at/uploads/5/5c/NandiP-SHAvite-3.txt Nandi,Paul]
 |-
 | impossible differential || block cipher || 224,256 || 5 rounds  || -  || - || [http://www.cs.technion.ac.il/~orrd/SHAvite-3/Spec.15.09.09.pdf submission document]
@@ Line 72: / Line 72: @@
 <bibtex>

← Older revision		Revision as of 22:18, 29 January 2010
Line 41:		Line 41:

	Recommended security parameter: '''12''' rounds (n=224,256); '''14''' rounds (n=384,512)		Recommended security parameter: '''12''' rounds (n=224,256); '''14''' rounds (n=384,512)
		+
		+	{\| border="1" cellpadding="4" cellspacing="0" class="wikitable" style="text-align:center"
		+	\|- style="background:#efefef;"
		+	\| Type of Analysis \|\| Hash Size (n) \|\| Parameters \|\| Compression Function Calls \|\| Memory Requirements \|\| Reference
		+	\|-
		+	\| \|\| \|\| \|\| \|\| \|\|
		+	\|-
		+	\|}

@@ Line 30: / Line 30: @@
 == Cryptanalysis ==
 {| border="1" cellpadding="4" cellspacing="0" class="wikitable" style="text-align:center"
@@ Line 35: / Line 53: @@
 |   Type of Analysis || Hash Function Part || Hash Size (n) || Parameters/Variants || Compression Function Calls || Memory Requirements ||   Reference
 |-
-|   | pseudo-collision || compression || all ||  ||  ||  || [http://ehash.iaik.tugraz.at/uploads/e/ea/Peyrin-SHAvite-3.txt Peyrin]
+|   | pseudo-collision || compression || all || (Round 1) ||  ||  || [http://ehash.iaik.tugraz.at/uploads/e/ea/Peyrin-SHAvite-3.txt Peyrin]
 |-
-|   | pseudo-collision || compression || 256 ||  ||  ||  || [http://ehash.iaik.tugraz.at/uploads/5/5c/NandiP-SHAvite-3.txt Nandi,Paul]
+|   | pseudo-collision || compression || 256 || (Round 1) ||  ||  || [http://ehash.iaik.tugraz.at/uploads/5/5c/NandiP-SHAvite-3.txt Nandi,Paul]
 |-
 |}
-A description of this table is given [http://ehash.iaik.tugraz.at/wiki/Cryptanalysis_Categories#Individual_Hash_Function_Tables here].

@@ Line 4: / Line 4: @@
 * Website: [http://www.cs.technion.ac.il/~orrd/SHAvite-3/ http://www.cs.technion.ac.il/~orrd/SHAvite-3/]
 * NIST submission package:
-** round 1: [http://csrc.nist.gov/groups/ST/hash/sha-3/Round1/documents/SHAvite-3.zip SHAvite-3.zip] (old version: [http://csrc.nist.gov/groups/ST/hash/sha-3/Round1/documents/SHAvite3Update.zip SHAvite3Update.zip])
+** round 1: [http://csrc.nist.gov/groups/ST/hash/sha-3/Round1/documents/SHAvite3Update.zip SHAvite3Update.zip] (old version: [http://csrc.nist.gov/groups/ST/hash/sha-3/Round1/documents/SHAvite-3.zip SHAvite-3.zip])
 ** round 2: [http://csrc.nist.gov/groups/ST/hash/sha-3/Round2/documents/SHAvite-3_Round2.zip SHAvite-3_Round2.zip]
@@ Line 27: / Line 27: @@
+}
 </bibtex>
 == Cryptanalysis ==