Improved indifferentiability security bound for the JH mode
| Autor: | Daniel Smith-Tone, Souradyuti Paul, Dustin Moody |
|---|---|
| Jazyk: | angličtina |
| Rok vydání: | 2016 |
| Předmět: |
Discrete mathematics
Theoretical computer science business.industry Applied Mathematics Hash function JH mode of operation Indifferentiability 020206 networking & telecommunications Cryptography Hash functions 02 engineering and technology JH Grøstl Computer Science Applications Permutation SHA-2 0202 electrical engineering electronic engineering information engineering Hash chain Cryptographic hash function Security 020201 artificial intelligence & image processing business Mathematics |
| Zdroj: | IndraStra Global. |
| ISSN: | 2381-3652 |
| Popis: | Indifferentiability security of a hash mode of operation guarantees the mode's resistance against all generic attacks. It is also useful to establish the security of protocols that use hash functions as random functions. The JH hash function was one of the five finalists in the National Institute of Standards and Technology SHA-3 hash function competition. Despite several years of analysis, the indifferentiability security of the JH mode has remained remarkably low, only at n/3 bits, while the two finalist modes Keccak and Grostl offer a security guarantee of n/2 bits. Note all these three modes operate with n-bit digest and 2n-bit permutations. In this paper, we improve the indifferentiability security bound for the JH mode to n/2 bits (e.g. from approximately 171 to 256 bits when n=512). To put this into perspective, our result guarantees the absence of (non-trivial) attacks on both the JH-256 and JH-512 hash functions with time less than approximately 2256 computations of the underlying 1024-bit permutation, under the assumption that the underlying permutations can be modeled as an ideal permutation. Our bounds are optimal for JH-256, and the best known for JH-512. We obtain this improved bound by establishing an isomorphism of certain query-response graphs through a careful design of the simulators and bad events. Our experimental data strongly supports the theoretically obtained results. by Dustin Moody, Souradyuti Paul and Daniel Smith-Tone |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|