Preimage attack on hash function RIPEMD

  • Gaoli Wang*
  • , Shaohui Wang
  • *Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

8 Scopus citations

Abstract

RIPEMD is a cryptographic hash function devised in the framework of the RIPE project (RACE Integrity Primitives Evaluation, 1988-1992). It consists of two parallel lines, and each line is identical to MD4 except for some internal constants. It has been broken by the collision attack, but no preimage attack was given. In this paper, we give a preimage attack on the compression function of the 26-step reduced RIPEMD with complexity 2110 compression function computations, and we extend the attack on the compression function to an attack on the 26-step reduced RIPEMD with complexity 2115.2 instead of 2128. Then we extend the attack on 26 steps to the attack on 29 steps with the same complexity. Moreover, we can reduce the complexity of the preimage attack on the full RIPEMD without the padding rule by 1 bit compared with the brute-force attack.

Original languageEnglish
Title of host publicationInformation Security Practice and Experience - 5th International Conference, ISPEC 2009, Proceedings
Pages274-284
Number of pages11
DOIs
StatePublished - 2009
Externally publishedYes
Event5th International Conference on Information Security Practice and Experience, ISPEC 2009 - Xi'an, China
Duration: 13 Apr 200915 Apr 2009

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume5451 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference5th International Conference on Information Security Practice and Experience, ISPEC 2009
Country/TerritoryChina
CityXi'an
Period13/04/0915/04/09

Keywords

  • Cryptanalysis
  • Hash function
  • Preimage attack
  • RIPEMD

Fingerprint

Dive into the research topics of 'Preimage attack on hash function RIPEMD'. Together they form a unique fingerprint.

Cite this