SHA-512/384

From The ECRYPT Hash Function Website

1 Specification

• digest size: 512 bits, truncation to 384 bits also specified
• max. message length: < 2¹²⁸ bits
• compression function: 1024-bit message block, 512-bit chaining variable
• Specification: FIPS 180-2 Secure Hash Standard

2 Cryptanalysis

2.1 Best Known Results

2.2 Generic Attacks

• Generic Attacks on the Merkle-Damgaard Construction

2.3 Collision Attacks

In Proceedings of ISC, LNCS 5222, pp. 244-259, Springer, 2008

[Electronic Edition] [Bibtex]

Author : Somitra Kumar Sanadhya, Palash Sarkar
Title : Deterministic Constructions of 21-Step Collisions for the SHA-2 Hash Family
In : In Proceedings of ISC -

[Abstract]

In Proceedings of ACISP, LNCS 5107, pp. 254-266, Springer, 2008

[Electronic Edition] [Bibtex]

Author : Somitra Kumar Sanadhya, Palash Sarkar
Title : Non-linear Reduced Round Attacks against SHA-2 Hash Family
In : In Proceedings of ACISP -

[Abstract]

In Proceedings of Selected Areas in Cryptography, LNCS 3006, pp. 175-193, Springer, 2003

[Electronic Edition] [Bibtex]

Author : Henri Gilbert, Helena Handschuh
Title : Security Analysis of SHA-256 and Sisters
In : In Proceedings of Selected Areas in Cryptography -

[Abstract]

2.4 Second Preimage Attacks

2.5 Preimage Attacks

2.6 Others