Cryptanalysis of the GOST Hash Function

Florian Mendel, Norbert Pramstaller, Christian Rechberger, Marcin Kontak, Janusz Szmidt

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abstract

In this article, we analyze the security of the GOST hash function. The GOST hash function, defined in the Russian standard GOST 34.11-94, is an iterated hash function producing a 256-bit hash value. As opposed to most commonly used hash functions such as MD5 and SHA-1, the GOST hash function defines, in addition to the common iterative structure, a checksum computed over all input message blocks. This checksum is then part of the final hash value computation.

As a result of our security analysis of the GOST hash function, we present the first collision attack with a complexity of about 2105 evaluations of the compression function. Furthermore, we are able to significantly improve upon the results of Mendel et al. with respect to preimage and second preimage attacks. Our improved attacks have a complexity of about 2192 evaluations of the compression function.
Original languageEnglish
Title of host publicationAdvances in Cryptology - Proceedings CRYPTO 2008
EditorsDongdai Lin
PublisherSpringer
Pages162-178
ISBN (Print)978-3-540-85173-8
DOIs
Publication statusPublished - 2008
Event28th Annual International Cryptology Conference: CRYPTO 2008 - Santa Barbara, United States
Duration: 17 Aug 2008 → 21 Aug 2008

Publication series

NameLecture Notes in Computer Science
PublisherSpringer
Volume5157

Conference

Conference28th Annual International Cryptology Conference
Abbreviated titleCRYPTO 2008
Country/TerritoryUnited States
CitySanta Barbara
Period17/08/08 → 21/08/08

Access to Document

    Fingerprint

    Dive into the research topics of 'Cryptanalysis of the GOST Hash Function'. Together they form a unique fingerprint.
    View full fingerprint

    • FWF - Kryptoanalyse - Cryptanalysis by means of numerical methods

      Mendel, F. (Co-Investigator (CoI)), Nad, T. (Co-Investigator (CoI)), Lamberger, M. (Co-Investigator (CoI)), Rechberger, C. (Co-Investigator (CoI)), Schläffer, M. (Co-Investigator (CoI)) & Rijmen, V. (Principal Investigator (PI))

      1/10/07 → 30/09/09

      Project: Research project

    • A-SIT - Secure Information Technology Center Austria

      Stranacher, K. (Co-Investigator (CoI)), Dominikus, S. (Co-Investigator (CoI)), Leitold, H. (Co-Investigator (CoI)), Marsalek, A. (Co-Investigator (CoI)), Teufl, P. (Co-Investigator (CoI)), Bauer, W. (Co-Investigator (CoI)), Aigner, M. J. (Co-Investigator (CoI)), Rössler, T. (Co-Investigator (CoI)), Neuherz, E. (Co-Investigator (CoI)), Dietrich, K. (Co-Investigator (CoI)), Zefferer, T. (Co-Investigator (CoI)), Mangard, S. (Co-Investigator (CoI)), Payer, U. (Co-Investigator (CoI)), Orthacker, C. (Co-Investigator (CoI)), Lipp, P. (Co-Investigator (CoI)), Reiter, A. (Co-Investigator (CoI)), Knall, T. (Co-Investigator (CoI)), Bratko, H. (Co-Investigator (CoI)), Bonato, M. (Co-Investigator (CoI)), Suzic, B. (Co-Investigator (CoI)), Zwattendorfer, B. (Co-Investigator (CoI)), Kreuzhuber, S. (Co-Investigator (CoI)), Oswald, M. E. (Co-Investigator (CoI)), Tauber, A. (Co-Investigator (CoI)), Posch, R. (Principal Investigator (PI)), Bratko, D. (Co-Investigator (CoI)), Feichtner, J. (Co-Investigator (CoI)), Ivkovic, M. (Co-Investigator (CoI)), Reimair, F. (Co-Investigator (CoI)), Wolkerstorfer, J. (Co-Investigator (CoI)) & Scheibelhofer, K. (Co-Investigator (CoI))

      21/05/99 → 31/12/24

      Project: Research area

    • Cryptography

      Schläffer, M. (Co-Investigator (CoI)), Oswald, M. E. (Co-Investigator (CoI)), Lipp, P. (Co-Investigator (CoI)), Dobraunig, C. E. (Co-Investigator (CoI)), Mendel, F. (Co-Investigator (CoI)), Eichlseder, M. (Co-Investigator (CoI)), Nad, T. (Co-Investigator (CoI)), Posch, R. (Co-Investigator (CoI)), Lamberger, M. (Co-Investigator (CoI)), Rijmen, V. (Co-Investigator (CoI)) & Rechberger, C. (Co-Investigator (CoI))

      1/01/95 → 31/01/19

      Project: Research area

    Cite this