Rebound Attacks on the Reduced Grøstl Hash Function

Florian Mendel; Christian Rechberger; Martin Schläffer; Søren Steffen Thomsen

doi:10.1007/978-3-642-11925-5_24

Rebound Attacks on the Reduced Grøstl Hash Function

Florian Mendel, Christian Rechberger, Martin Schläffer, Søren Steffen Thomsen

Institute of Information Security (7050)

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abstract

Grøstl is one of 14 second round candidates of the NIST SHA-3 competition. Cryptanalytic results on the wide-pipe compression function of Grøstl-256 have already been published. However, little is known about the hash function, arguably a much more interesting cryptanalytic setting. Also, Grøstl-512 has not been analyzed yet. In this paper, we show the first cryptanalytic attacks on reduced-round versions of the Grøstl hash functions. These results are obtained by several extensions of the rebound attack. We present a collision attack on 4/10 rounds of the Grøstl-256 hash function and 5/14 rounds of the Grøstl-512 hash functions. Additionally, we give the best collision attack for reduced-round (7/10 and 7/14) versions of the compression function of Grøstl-256 and Grøstl-512.

Original language	English
Title of host publication	Topics in Cryptology - CT-RSA 2010
Place of Publication	Berlin; Heidelberg
Publisher	Springer
Pages	350-365
ISBN (Print)	978-3-642-11924-8
DOIs	https://doi.org/10.1007/978-3-642-11925-5_24
Publication status	Published - 2010
Event	10th Cryptographers' Track at the RSA Conference: CT-RSA 2010 - San Francisco, United States Duration: 1 Mar 2010 → 5 Mar 2010

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	5985

Conference

Conference	10th Cryptographers' Track at the RSA Conference
Abbreviated title	CT-RSA 2010
Country/Territory	United States
City	San Francisco
Period	1/03/10 → 5/03/10

Fields of Expertise

Information, Communication & Computing

Access to Document

10.1007/978-3-642-11925-5_24

ctrsaMendelRST10Final published version, 624 KB

EU - ECRYPT II - European network of excellence in cryptology - Phase II
Schmidt, J.-M. (Co-Investigator (CoI)), Nad, T. (Co-Investigator (CoI)), Kirschbaum, M. (Co-Investigator (CoI)), Feldhofer, M. (Co-Investigator (CoI)), Schläffer, M. (Co-Investigator (CoI)), Aigner, M. J. (Co-Investigator (CoI)), Rechberger, C. (Co-Investigator (CoI)), Lamberger, M. (Co-Investigator (CoI)), Tillich, S. (Co-Investigator (CoI)), Medwed, M. (Co-Investigator (CoI)), Hutter, M. (Co-Investigator (CoI)), Rijmen, V. (Co-Investigator (CoI)), Mendel, F. (Co-Investigator (CoI)) & Posch, R. (Principal Investigator (PI))
1/08/08 → 31/01/13
Project: Research project
Cryptography
Schläffer, M. (Co-Investigator (CoI)), Oswald, M. E. (Co-Investigator (CoI)), Lipp, P. (Co-Investigator (CoI)), Dobraunig, C. E. (Co-Investigator (CoI)), Mendel, F. (Co-Investigator (CoI)), Eichlseder, M. (Co-Investigator (CoI)), Nad, T. (Co-Investigator (CoI)), Posch, R. (Co-Investigator (CoI)), Lamberger, M. (Co-Investigator (CoI)), Rijmen, V. (Co-Investigator (CoI)) & Rechberger, C. (Co-Investigator (CoI))
1/01/95 → 31/01/19
Project: Research area

Cite this

Mendel, F, Rechberger, C, Schläffer, M & Thomsen, SS 2010, Rebound Attacks on the Reduced Grøstl Hash Function. in Topics in Cryptology - CT-RSA 2010. Lecture Notes in Computer Science, vol. 5985, Springer, Berlin; Heidelberg, pp. 350-365, 10th Cryptographers' Track at the RSA Conference, San Francisco, United States, 1/03/10. https://doi.org/10.1007/978-3-642-11925-5_24

@inproceedings{d371287417e44338b1be7226bd3c6426,

title = "Rebound Attacks on the Reduced Gr{\o}stl Hash Function",

abstract = "Gr{\o}stl is one of 14 second round candidates of the NIST SHA-3 competition. Cryptanalytic results on the wide-pipe compression function of Gr{\o}stl-256 have already been published. However, little is known about the hash function, arguably a much more interesting cryptanalytic setting. Also, Gr{\o}stl-512 has not been analyzed yet. In this paper, we show the first cryptanalytic attacks on reduced-round versions of the Gr{\o}stl hash functions. These results are obtained by several extensions of the rebound attack. We present a collision attack on 4/10 rounds of the Gr{\o}stl-256 hash function and 5/14 rounds of the Gr{\o}stl-512 hash functions. Additionally, we give the best collision attack for reduced-round (7/10 and 7/14) versions of the compression function of Gr{\o}stl-256 and Gr{\o}stl-512.",

author = "Florian Mendel and Christian Rechberger and Martin Schl{\"a}ffer and Thomsen, {S{\o}ren Steffen}",

year = "2010",

doi = "10.1007/978-3-642-11925-5_24",

language = "English",

isbn = "978-3-642-11924-8",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "350--365",

booktitle = "Topics in Cryptology - CT-RSA 2010",

note = "10th Cryptographers' Track at the RSA Conference : CT-RSA 2010 , CT-RSA 2010 ; Conference date: 01-03-2010 Through 05-03-2010",

}

TY - GEN

T1 - Rebound Attacks on the Reduced Grøstl Hash Function

AU - Mendel, Florian

AU - Rechberger, Christian

AU - Schläffer, Martin

AU - Thomsen, Søren Steffen

PY - 2010

Y1 - 2010

N2 - Grøstl is one of 14 second round candidates of the NIST SHA-3 competition. Cryptanalytic results on the wide-pipe compression function of Grøstl-256 have already been published. However, little is known about the hash function, arguably a much more interesting cryptanalytic setting. Also, Grøstl-512 has not been analyzed yet. In this paper, we show the first cryptanalytic attacks on reduced-round versions of the Grøstl hash functions. These results are obtained by several extensions of the rebound attack. We present a collision attack on 4/10 rounds of the Grøstl-256 hash function and 5/14 rounds of the Grøstl-512 hash functions. Additionally, we give the best collision attack for reduced-round (7/10 and 7/14) versions of the compression function of Grøstl-256 and Grøstl-512.

AB - Grøstl is one of 14 second round candidates of the NIST SHA-3 competition. Cryptanalytic results on the wide-pipe compression function of Grøstl-256 have already been published. However, little is known about the hash function, arguably a much more interesting cryptanalytic setting. Also, Grøstl-512 has not been analyzed yet. In this paper, we show the first cryptanalytic attacks on reduced-round versions of the Grøstl hash functions. These results are obtained by several extensions of the rebound attack. We present a collision attack on 4/10 rounds of the Grøstl-256 hash function and 5/14 rounds of the Grøstl-512 hash functions. Additionally, we give the best collision attack for reduced-round (7/10 and 7/14) versions of the compression function of Grøstl-256 and Grøstl-512.

U2 - 10.1007/978-3-642-11925-5_24

DO - 10.1007/978-3-642-11925-5_24

M3 - Conference paper

SN - 978-3-642-11924-8

T3 - Lecture Notes in Computer Science

SP - 350

EP - 365

BT - Topics in Cryptology - CT-RSA 2010

PB - Springer

CY - Berlin; Heidelberg

T2 - 10th Cryptographers' Track at the RSA Conference

Y2 - 1 March 2010 through 5 March 2010

ER -

Rebound Attacks on the Reduced Grøstl Hash Function

Abstract

Publication series

Conference

Fields of Expertise

Access to Document

Fingerprint

Projects

EU - ECRYPT II - European network of excellence in cryptology - Phase II

Cryptography

Cite this