On the Security of Multivariate Hash Functions  

作　　者：罗宜元 来学嘉 

机构地区：[1]Department of Computer Science and Engineering,Shanghai Jiaotong University

出　　处：《Journal of Shanghai Jiaotong university(Science)》2009年第2期219-222,共4页上海交通大学学报（英文版）

基　　金：the National Natural Science Foundationof China(Nos.60573032,60773092,90604036);the National High Technology Research and Development Program(863)of China(No.2007AA01Z456)

摘　　要：Multivariate hash functions are a type of hash functions whose compression function is explicitly defined as a sequence of multivariate equations. Billet et al designed the hash function MQ-HASH and Ding et al proposed a similar construction. In this paper, we analyze the security of multivariate hash functions and conclude that low degree multivariate functions such as MQ-HASH are neither pseudo-random nor unpredictable. There may be trivial collisions and fixed point attacks if the parameters of the compression function have been chosen. And they are also not computation-resistance, which makes MAC forgery easily.Multivariate hash functions axe a type of hash functions whose compression function is explicitly defined as a sequence of multivariate equations.Billet et al designed the hash function MQ-HASH and Ding et al proposed a similar construction.In this paper,we analyze the security of multivariate hash functions and conclude that low degree multivariate functions such as MQ-HASH are neither pseudo-random nor unpredictable.There may be trivial collisions and fixed point attacks if the parameters of the compression function have been chosen. And they are also not computation-resistance,which makes MAC forgery easily.

关 键 词：hash functions MACS MULTIVARIATE 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP311.56[自动化与计算机技术—计算机科学与技术]