新的Haval-128的碰撞攻击  

New attack on Haval-128

作　　者：汪玉[1] 阮艳华[2] 陈建华[1] 

机构地区：[1]武汉大学数学与统计学院,湖北武汉430072 [2]江西蓝天学院,江西南昌330098

出　　处：《计算机工程与设计》2008年第20期5159-5162,共4页Computer Engineering and Design

摘　　要：为了分析Hash函数的安全性,利用模差分,给出了一种新的Haval-128的碰撞攻击方法。主要结论是对于不同的初值可以选择不同的模差分,因而初值的选取具有更大的灵活性,并且给出了一种更有效的高级明文修改方法。在这组新的初值和差分条件下,通过PC机上大量测试,表明算法稳定以1/140左右的概率找到一组碰撞。该攻击方法同样适用于其它Hash函数,比如MD5和SHA1。In order to analyze the security of Hash functions, a new attack on Haval-128 is concerned with modular differential. The major results include that different modular differential can be found aimed at different initial values, which leads to a more flexible choice of initial values, and a new method of message modification is given. Experimental results on PC demonstrate collision will be found with probability 1/140 under this attack. This method is also applicable to other hash functions, such as MD5 and SHA1.

关 键 词：杂凑函数 碰撞 差分分析 差分特征 高级明文修改 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]