SHA-256算法的安全性分析  

Analysis safety of SHA-256 algorithm

作　　者：何润民[1] 马俊[1] 

机构地区：[1]陕西工业职业技术学院基础部,陕西咸阳712000

出　　处：《电子设计工程》2014年第3期31-33,共3页Electronic Design Engineering

摘　　要：现有算法MD5、SHA-1等的相继破译,严重威胁到SHA-256、SAH-384等算法的安全性。本文介绍了SHA-256的算法逻辑及压缩函数的构造,探讨了生日攻击碰撞阈值和攻击步骤,分析了SHA-256在生日攻击下的安全性。通过对Chabaud-Joux攻击SHA-256的分析,找到了一个部分碰撞,其复杂度为,却无法找到SHA-256的一个整体碰撞。所以,在抵抗生日攻击和抵御现有差分攻击方面,SHA-256比MD5和SHA-1等具有更高的安全性。Existing algorithms MD5,SHA-1 etc.have been deciphered,itis a serious threat to the SHA-256,SAH-384 algorithms such as security.This article describes the SHA-256 algorithm logic and structure of the compression function,explores the collision threshold birthday attack and attack procedures,and analyzesthe security of SHA-256 in birthday attack security.After analysis Chabaud-Joux attack by the SHA-256 analysis,that it find a part of the collision,its complexity is,but it could not find a whole SHA-256 collisions.So,in the resistance birthday attack and defend against the existing differential attacks,so SHA-256 has higher security than MD5 、SHA-1 and so on.

关 键 词：HASH函数 SAH-256 生日攻击 差分攻击 

分 类 号：TN701[电子电信—电路与系统]