PANAMA

From The ECRYPT Hash Function Website

1 Specification

• digest size: 256 bits
• max. message length: arbitrary length
• compression function: 256-bit message block, > 1 Kbyte chaining state
• Specification:

In Proceedings of FSE, LNCS 1372, pp. 60-74, Springer, 1998

[Electronic Edition] [Bibtex]

Author : Joan Daemen, Craig S. K. Clapp
Title : Fast Hashing and Stream Encryption with PANAMA
In : In Proceedings of FSE -

[Abstract]

2 Cryptanalysis

2.1 Best Known Results

The best collision attack on PANAMA was presented by Daemen and Van Assche. The attack has a complexity of about attack 2⁶ evaluations of the state updating function.

2.2 Generic Attacks

• PANAMA is not a design follwing the Merkle-Damgaard construction principle. Generic Attacks on Hash Functions

2.3 Collision Attacks

In Proceedings of FSE, LNCS 4593, pp. 1-18, Springer, 2007

[Electronic Edition] [Bibtex]

Author : Joan Daemen, Gilles Van Assche
Title : Producing Collisions for Panama, Instantaneously
In : In Proceedings of FSE -

[Abstract]

In Proceedings of FSE, LNCS 2355, pp. 37-51, Springer, 2002

[Electronic Edition] [Bibtex]

Author : Vincent Rijmen, Bart Van Rompay, Bart Preneel, Joos Vandewalle
Title : Producing Collisions for PANAMA
In : In Proceedings of FSE -

[Abstract]

2.4 Second Preimage Attacks

2.5 Preimage Attacks

2.6 Others