Distinguishers for the Compression Function and Output Transformation of Hamsi-256

Jean-Philippe Aumasson; Emilia Käsper; Lars Ramkilde Knudsen; Krystian Matusiewicz; Rune Ødegård; Thomas Peyrin; Martin Schläffer

doi:10.1007/978-3-642-14081-5_6

Distinguishers for the Compression Function and Output Transformation of Hamsi-256

Jean-Philippe Aumasson, Emilia Käsper, Lars Ramkilde Knudsen, Krystian Matusiewicz, Rune Ødegård, Thomas Peyrin, Martin Schläffer

Institute of Applied Information Processing and Communications (7050)

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abstract

Hamsi is one of 14 remaining candidates in NIST’s Hash Competition for the future hash standard SHA-3. Until now, little analysis has been published on its resistance to differential cryptanalysis, the main technique used to attack hash functions. We present a study of Hamsi’s resistance to differential and higher-order differential cryptanalysis, with focus on the 256-bit version of Hamsi. Our main results are efficient distinguishers and near-collisions for its full (3-round) compression function, and distinguishers for its full (6-round) finalization function, indicating that Hamsi’s building blocks do not behave ideally.

Original language	English
Title of host publication	ACISP
Editors	Ron Steinfeld, Philip Hawkes
Publisher	Springer
Pages	87-103
ISBN (Print)	978-3-642-14080-8
DOIs	https://doi.org/10.1007/978-3-642-14081-5_6
Publication status	Published - 2010

Publication series

Name	Lecture Notes in Computer Science
Volume	6168

Fields of Expertise

Information, Communication & Computing

Access to Document

10.1007/978-3-642-14081-5_6

acispAumassonKKMOPS10Final published version, 395 KB

FWF - kryptographische Hashfu - Cryptanalysis of modern cryptographic hash functions II
Nad, T., Mendel, F., Schläffer, M., Lamberger, M. & Rijmen, V.
1/02/10 → 31/01/13
Project: Research project
EU - ECRYPT II - European network of excellence in cryptology - Phase II
Schmidt, J., Nad, T., Kirschbaum, M., Feldhofer, M., Schläffer, M., Aigner, M. J., Rechberger, C., Lamberger, M., Tillich, S., Medwed, M., Hutter, M., Rijmen, V., Mendel, F. & Posch, R.
1/08/08 → 31/07/12
Project: Research project
Cryptography
Schläffer, M., Oswald, M. E., Lipp, P., Dobraunig, C. E., Mendel, F., Eichlseder, M., Nad, T., Posch, R., Lamberger, M., Rijmen, V. & Rechberger, C.
1/01/95 → 31/01/19
Project: Research area

Cite this

Distinguishers for the Compression Function and Output Transformation of Hamsi-256. / Aumasson, Jean-Philippe; Käsper, Emilia; Knudsen, Lars Ramkilde et al.
ACISP. ed. / Ron Steinfeld; Philip Hawkes. Springer, 2010. p. 87-103 (Lecture Notes in Computer Science; Vol. 6168).

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

@inproceedings{90163fc9da9f41fb950e28c130619a7e,

title = "Distinguishers for the Compression Function and Output Transformation of Hamsi-256",

abstract = "Hamsi is one of 14 remaining candidates in NIST{\textquoteright}s Hash Competition for the future hash standard SHA-3. Until now, little analysis has been published on its resistance to differential cryptanalysis, the main technique used to attack hash functions. We present a study of Hamsi{\textquoteright}s resistance to differential and higher-order differential cryptanalysis, with focus on the 256-bit version of Hamsi. Our main results are efficient distinguishers and near-collisions for its full (3-round) compression function, and distinguishers for its full (6-round) finalization function, indicating that Hamsi{\textquoteright}s building blocks do not behave ideally.",

author = "Jean-Philippe Aumasson and Emilia K{\"a}sper and Knudsen, {Lars Ramkilde} and Krystian Matusiewicz and Rune {\O}deg{\aa}rd and Thomas Peyrin and Martin Schl{\"a}ffer",

year = "2010",

doi = "10.1007/978-3-642-14081-5_6",

language = "English",

isbn = "978-3-642-14080-8",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "87--103",

editor = "Ron Steinfeld and Philip Hawkes",

booktitle = "ACISP",

}

TY - GEN

T1 - Distinguishers for the Compression Function and Output Transformation of Hamsi-256

AU - Aumasson, Jean-Philippe

AU - Käsper, Emilia

AU - Knudsen, Lars Ramkilde

AU - Matusiewicz, Krystian

AU - Ødegård, Rune

AU - Peyrin, Thomas

AU - Schläffer, Martin

PY - 2010

Y1 - 2010

N2 - Hamsi is one of 14 remaining candidates in NIST’s Hash Competition for the future hash standard SHA-3. Until now, little analysis has been published on its resistance to differential cryptanalysis, the main technique used to attack hash functions. We present a study of Hamsi’s resistance to differential and higher-order differential cryptanalysis, with focus on the 256-bit version of Hamsi. Our main results are efficient distinguishers and near-collisions for its full (3-round) compression function, and distinguishers for its full (6-round) finalization function, indicating that Hamsi’s building blocks do not behave ideally.

AB - Hamsi is one of 14 remaining candidates in NIST’s Hash Competition for the future hash standard SHA-3. Until now, little analysis has been published on its resistance to differential cryptanalysis, the main technique used to attack hash functions. We present a study of Hamsi’s resistance to differential and higher-order differential cryptanalysis, with focus on the 256-bit version of Hamsi. Our main results are efficient distinguishers and near-collisions for its full (3-round) compression function, and distinguishers for its full (6-round) finalization function, indicating that Hamsi’s building blocks do not behave ideally.

U2 - 10.1007/978-3-642-14081-5_6

DO - 10.1007/978-3-642-14081-5_6

M3 - Conference paper

SN - 978-3-642-14080-8

T3 - Lecture Notes in Computer Science

SP - 87

EP - 103

BT - ACISP

A2 - Steinfeld, Ron

A2 - Hawkes, Philip

PB - Springer

ER -

Distinguishers for the Compression Function and Output Transformation of Hamsi-256

Abstract

Publication series

Fields of Expertise

Access to Document

Fingerprint

Projects

FWF - kryptographische Hashfu - Cryptanalysis of modern cryptographic hash functions II

EU - ECRYPT II - European network of excellence in cryptology - Phase II

Cryptography

Cite this