@inproceedings{4c73295887f74afc9c2d692de7adea7d,
title = "Collision attack for the hash function extended MD4",
abstract = "Extended MD4 is a hash function proposed by Rivest in 1990 with a 256-bit hash value. The compression function consists of two different and independent parallel lines called Left Line and Right Line, and each line has 48 steps. The initial values of Left Line and Right Line are denoted by IV0 and IV1 respectively. Dobbertin proposed a collision attack for the compression function of Extended MD4 with a complexity of about 240 under the condition that the value for IV0 = IV1 is prescribed. In this paper, we gave a collision attack on the full Extended MD4 with a complexity of about 237. Firstly, we propose a collision differential path for both lines by choosing a proper message difference, and deduce a set of sufficient conditions that ensure the differential path hold. Then by using some precise message modification techniques to improve the success probability of the attack, we find two-block collisions of Extended MD4 with less than 237 computations. This work provides a new reference to the collision analysis of other hash functions such as RIPEMD-160 etc. which consist of two lines.",
keywords = "Collision, Cryptanalysis, Differential path, Extended MD4, Hash functions",
author = "Gaoli Wang",
year = "2011",
doi = "10.1007/978-3-642-25243-3\_19",
language = "英语",
isbn = "9783642252426",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
pages = "228--241",
booktitle = "Information and Communications Security - 13th International Conference, ICICS 2011, Proceedings",
note = "13th International Conference on Information and Communications Security, ICICS 2011 ; Conference date: 23-11-2011 Through 26-11-2011",
}