Subspace Distinguisher for 5/8 Rounds of the ECHO-256 Hash Function

Martin Schläffer

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abstract

In this work we present first results for the hash function of ECHO. We provide a subspace distinguisher for 5 rounds and collisions for 4 out of 8 rounds of the ECHO-256 hash function. The complexities are 296 compression function calls for the distinguisher and 264 for the collision attack. The memory requirements are 264 for all attacks. To get these results, we consider new and sparse truncated differential paths through ECHO. We are able to construct these paths by analyzing the combined MixColumns and BigMixColumns transformation. Since in these sparse truncated differential paths at most one fourth of all bytes of each ECHO state are active, missing degrees of freedom are not a problem. Therefore, we are able to mount a rebound attack with multiple inbound phases to efficiently find according message pairs for ECHO.
Original languageEnglish
Title of host publicationSelected Areas in Cryptography
Subtitle of host publication17th International Workshop, SAC 2010, Waterloo, Ontario, Canada, August 12-13, 2010, Revised Selected Papers
EditorsAlex Biryukov, Guang Gong, Douglas R. Stinson
Place of PublicationBerlin; Heidelberg
PublisherSpringer
Pages369-387
ISBN (Print)978-3-642-19573-0
DOIs
Publication statusPublished - 2010
Event17th International Workshop on Selected Areas in Cryptography -: SAC 2010 - Waterloo, Canada
Duration: 12 Aug 2010 → 13 Aug 2010

Publication series

NameLecture Notes in Computer Science
PublisherSpringer
Volume6544

Workshop

Workshop17th International Workshop on Selected Areas in Cryptography -
Abbreviated titleSAC 2010
Country/TerritoryCanada
CityWaterloo
Period12/08/10 → 13/08/10

Fields of Expertise

  • Information, Communication & Computing

Access to Document

    Fingerprint

    Dive into the research topics of 'Subspace Distinguisher for 5/8 Rounds of the ECHO-256 Hash Function'. Together they form a unique fingerprint.
    View full fingerprint

    • FWF - kryptographische Hashfu - Cryptanalysis of modern cryptographic hash functions II

      Nad, T. (Co-Investigator (CoI)), Mendel, F. (Co-Investigator (CoI)), Schläffer, M. (Co-Investigator (CoI)), Lamberger, M. (Co-Investigator (CoI)) & Rijmen, V. (Principal Investigator (PI))

      1/02/10 → 31/01/13

      Project: Research project

    • EU - ECRYPT II - European network of excellence in cryptology - Phase II

      Schmidt, J.-M. (Co-Investigator (CoI)), Nad, T. (Co-Investigator (CoI)), Kirschbaum, M. (Co-Investigator (CoI)), Feldhofer, M. (Co-Investigator (CoI)), Schläffer, M. (Co-Investigator (CoI)), Aigner, M. J. (Co-Investigator (CoI)), Rechberger, C. (Co-Investigator (CoI)), Lamberger, M. (Co-Investigator (CoI)), Tillich, S. (Co-Investigator (CoI)), Medwed, M. (Co-Investigator (CoI)), Hutter, M. (Co-Investigator (CoI)), Rijmen, V. (Co-Investigator (CoI)), Mendel, F. (Co-Investigator (CoI)) & Posch, R. (Principal Investigator (PI))

      1/08/08 → 31/01/13

      Project: Research project

    • Cryptography

      Schläffer, M. (Co-Investigator (CoI)), Oswald, M. E. (Co-Investigator (CoI)), Lipp, P. (Co-Investigator (CoI)), Dobraunig, C. E. (Co-Investigator (CoI)), Mendel, F. (Co-Investigator (CoI)), Eichlseder, M. (Co-Investigator (CoI)), Nad, T. (Co-Investigator (CoI)), Posch, R. (Co-Investigator (CoI)), Lamberger, M. (Co-Investigator (CoI)), Rijmen, V. (Co-Investigator (CoI)) & Rechberger, C. (Co-Investigator (CoI))

      1/01/95 → 31/01/19

      Project: Research area

    Cite this