改进的MD4有意义碰撞攻击  

Improved Meaningful Collision Attack on MD4

作　　者：周永鹏[1] 王高丽[2] 

机构地区：[1]东华大学计算机科学与技术学院,上海201620 [2]华东师范大学计算机科学与软件工程学院,上海200062

出　　处：《计算机科学》2017年第9期168-171,177,共5页Computer Science

基　　金：国家自然科学基金(61572125;61373142);上海市"科技创新行动计划"高新技术领域项目(16511101400)资助

摘　　要：在FSE 1996上,Hans Dobbertin给出了一个基于ASCII编码且前20个字符是随机字符的有意义的MD4碰撞。贾珂婷和王小云教授于2009年给出了一个基于Latin-1字符集的有意义的MD4碰撞。以王小云教授的模差分方法为基础,采用于红波等在CANS 2005上给出的碰撞路线,给出了两个有意义的MD4碰撞实例,其中一个是基于GBK编码的汉语的有意义碰撞,另一个是基于UTF-8编码的英语的有意义的碰撞。同时给出了一个python脚本被篡改的实例。In FSE＇ 1996, Hans Dobbertin gave a meaningful collision on MD4 based on ASCII,which contains meaning- less words at the beginning of the text. In 2009,Jia and Wang presented a meaningful collision on MD4 based on I.atiwl character set, which contains meaningless words at the end of the text. In this paper, based on the modular differential method proposed by Wang, we gave two concrete meaningful collisions by using the differential characteristic proposed by Yu et al. in CANS 2005. One example of the meaningful collision is in Chinese and based on GBK, an other example is in English and based on UTFS. Moreover,an example of tampered python script was proposed.

关 键 词：MD4算法 模差分方分析 有意义的碰撞 GBK编码 UTF-8编码 

分 类 号：TN918.4[电子电信—通信与信息系统]