Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL

Eunjin Lee; Donghoon Chang; Jongsung Kim; Jaechul Sung; Seokhie Hong

doi:10.1007/978-3-540-71039-4_12

Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL

Eunjin Lee, Donghoon Chang, Jongsung Kim, Jaechul Sung, Seokhie Hong

Department of Mathematics

Korea University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

14 Scopus citations

Abstract

In 1992, Zheng, Pieprzyk and Seberry proposed a one-way hashing algorithm called HAVAL, which compresses a message of arbitrary length into a digest of 128, 160, 192, 224 or 256 bits. It operates in so called passes where each pass contains 32 steps. The number of passes can be chosen equal to 3, 4 or 5. In this paper, we devise a new differential path of 3-pass HAVAL with probability 2^-∈114, which allows us to design a second preimage attack on 3-pass HAVAL and partial key recovery attacks on HMAC/NMAC-3-pass HAVAL. Our partial key-recovery attack works with 2¹²² oracle queries, 5•2³² memory bytes and 2⁹⁶ 3-pass HAVAL computations.

Original language	English
Title of host publication	Fast Software Encryption - 15th International Workshop, FSE 2008, Revised Selected Papers
Pages	189-206
Number of pages	18
DOIs	https://doi.org/10.1007/978-3-540-71039-4_12
State	Published - 2008
Event	15th International Workshop on Fast Software Encryption, FSE 2008 - Lausanne, Switzerland Duration: 10 Feb 2008 → 13 Feb 2008

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	5086 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	15th International Workshop on Fast Software Encryption, FSE 2008
Country/Territory	Switzerland
City	Lausanne
Period	10/02/08 → 13/02/08

Keywords

HAVAL
HMAC
Key recovery attack
NMAC
Second preimage attack

Access to Document

10.1007/978-3-540-71039-4_12

Cite this

Lee, E., Chang, D., Kim, J., Sung, J., & Hong, S. (2008). Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL. In Fast Software Encryption - 15th International Workshop, FSE 2008, Revised Selected Papers (pp. 189-206). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 5086 LNCS). https://doi.org/10.1007/978-3-540-71039-4_12

Lee, Eunjin ; Chang, Donghoon ; Kim, Jongsung et al. / Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL. Fast Software Encryption - 15th International Workshop, FSE 2008, Revised Selected Papers. 2008. pp. 189-206 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{e41582646984410ca3522059a7b54558,

title = "Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL",

abstract = "In 1992, Zheng, Pieprzyk and Seberry proposed a one-way hashing algorithm called HAVAL, which compresses a message of arbitrary length into a digest of 128, 160, 192, 224 or 256 bits. It operates in so called passes where each pass contains 32 steps. The number of passes can be chosen equal to 3, 4 or 5. In this paper, we devise a new differential path of 3-pass HAVAL with probability 2-∈114, which allows us to design a second preimage attack on 3-pass HAVAL and partial key recovery attacks on HMAC/NMAC-3-pass HAVAL. Our partial key-recovery attack works with 2122 oracle queries, 5•232 memory bytes and 296 3-pass HAVAL computations.",

keywords = "HAVAL, HMAC, Key recovery attack, NMAC, Second preimage attack",

author = "Eunjin Lee and Donghoon Chang and Jongsung Kim and Jaechul Sung and Seokhie Hong",

year = "2008",

doi = "10.1007/978-3-540-71039-4_12",

language = "English",

isbn = "3540710388",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

pages = "189--206",

booktitle = "Fast Software Encryption - 15th International Workshop, FSE 2008, Revised Selected Papers",

note = "15th International Workshop on Fast Software Encryption, FSE 2008 ; Conference date: 10-02-2008 Through 13-02-2008",

}

Lee, E, Chang, D, Kim, J, Sung, J & Hong, S 2008, Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL. in Fast Software Encryption - 15th International Workshop, FSE 2008, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 5086 LNCS, pp. 189-206, 15th International Workshop on Fast Software Encryption, FSE 2008, Lausanne, Switzerland, 10/02/08. https://doi.org/10.1007/978-3-540-71039-4_12

Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL. / Lee, Eunjin; Chang, Donghoon; Kim, Jongsung et al.
Fast Software Encryption - 15th International Workshop, FSE 2008, Revised Selected Papers. 2008. p. 189-206 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 5086 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL

AU - Lee, Eunjin

AU - Chang, Donghoon

AU - Kim, Jongsung

AU - Sung, Jaechul

AU - Hong, Seokhie

PY - 2008

Y1 - 2008

N2 - In 1992, Zheng, Pieprzyk and Seberry proposed a one-way hashing algorithm called HAVAL, which compresses a message of arbitrary length into a digest of 128, 160, 192, 224 or 256 bits. It operates in so called passes where each pass contains 32 steps. The number of passes can be chosen equal to 3, 4 or 5. In this paper, we devise a new differential path of 3-pass HAVAL with probability 2-∈114, which allows us to design a second preimage attack on 3-pass HAVAL and partial key recovery attacks on HMAC/NMAC-3-pass HAVAL. Our partial key-recovery attack works with 2122 oracle queries, 5•232 memory bytes and 296 3-pass HAVAL computations.

AB - In 1992, Zheng, Pieprzyk and Seberry proposed a one-way hashing algorithm called HAVAL, which compresses a message of arbitrary length into a digest of 128, 160, 192, 224 or 256 bits. It operates in so called passes where each pass contains 32 steps. The number of passes can be chosen equal to 3, 4 or 5. In this paper, we devise a new differential path of 3-pass HAVAL with probability 2-∈114, which allows us to design a second preimage attack on 3-pass HAVAL and partial key recovery attacks on HMAC/NMAC-3-pass HAVAL. Our partial key-recovery attack works with 2122 oracle queries, 5•232 memory bytes and 296 3-pass HAVAL computations.

KW - HAVAL

KW - HMAC

KW - Key recovery attack

KW - NMAC

KW - Second preimage attack

UR - http://www.scopus.com/inward/record.url?scp=50249137694&partnerID=8YFLogxK

U2 - 10.1007/978-3-540-71039-4_12

DO - 10.1007/978-3-540-71039-4_12

M3 - Conference contribution

AN - SCOPUS:50249137694

SN - 3540710388

SN - 9783540710387

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 189

EP - 206

BT - Fast Software Encryption - 15th International Workshop, FSE 2008, Revised Selected Papers

T2 - 15th International Workshop on Fast Software Encryption, FSE 2008

Y2 - 10 February 2008 through 13 February 2008

ER -

Lee E, Chang D, Kim J, Sung J, Hong S. Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL. In Fast Software Encryption - 15th International Workshop, FSE 2008, Revised Selected Papers. 2008. p. 189-206. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-540-71039-4_12

Second preimage attack on 3-pass HAVAL and partial key-recovery attacks on HMAC/NMAC-3-pass HAVAL

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this