Rebound Distinguishers: Results on the Full Whirlpool Compression Function
| Autor: | Florian Mendel, Vincent Rijmen, Martin Schläffer, Christian Rechberger, Mario Lamberger |
|---|---|
| Přispěvatelé: | Matsui, M |
| Jazyk: | angličtina |
| Rok vydání: | 2009 |
| Předmět: | |
| Zdroj: | Advances in Cryptology – ASIACRYPT 2009 ISBN: 9783642103650 ASIACRYPT |
| Popis: | Whirlpool is a hash function based on a block cipher that can be seen as a scaled up variant of the AES. The main difference is the (compared to AES) extremely conservative key schedule. In this work, we present a distinguishing attack on the full compression function of Whirlpool. We obtain this result by improving the rebound attack on reduced Whirlpool with two new techniques. First, the inbound phase of the rebound attack is extended by up to two rounds using the available degrees of freedom of the key schedule. This results in a near-collision attack on 9.5 rounds of the compression function of Whirlpool with a complexity of 2176 and negligible memory requirements. Second, we show how to turn this near-collision attack into a distinguishing attack for the full 10 round compression function of Whirlpool. This is the first result on the full Whirlpool compression function. © 2009 Springer-Verlag. ispartof: pages:126-143 ispartof: Lecture Notes in Computer Science vol:5912 pages:126-143 ispartof: ASIACRYPT 2009 location:JAPAN, Tokyo date:6 Dec - 10 Dec 2009 status: published |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|