Difference between revisions of "JH"

Type of Analysis	Hash Size (n)	Parameters	Compression Function Calls	Memory Requirements	Reference
preimage	512		2⁵⁰⁷	2⁵⁰⁷	Bhattacharyya et al.
preimage⁽¹⁾	512		2^510.3 (+ 2⁵²⁴ MA + 2⁵²⁴ CMP)	2^510.3 (Wu: 2^510.6)	Mendel,Thomsen, Wu

⁽¹⁾ Wu has analyzed the exact memory requirements, additional memory accesses (MA) and comparisons (CMP) of the attack by Mendel and Thomsen.

2.2 Building blocks

Here we list results on underlying building blocks, and the hash function modified by other means than the security parameter.

Note that these results assume more direct control or access over some internal variables (aka. free-start, pseudo, compression function, block cipher, or permutation attacks).

Type of Analysis	Hash Function Part	Hash Size (n)	Parameters/Variants	Compression Function Calls	Memory Requirements	Reference
semi-free-start collision	compression function	256	16 rounds	2^96.12	2^96.12	Naya-Plasencia
semi-free-start near collision	compression function	256	22 rounds	2^95.63	2^95.63	Naya-Plasencia
semi-free-start near collision	compression function	all	10 rounds	2^23.24	-	Turan,Uyan
semi-free-start collision	hash	256	16 rounds	2^178.24	2^101.12	Rijmen,Toz,Varıcı
semi-free-start near collision	compression function	256	22 rounds	2^156.77	2^143.70	Rijmen,Toz,Varıcı
semi-free-start near collision	compression function	256	22 rounds	2^156.56	2^143.70	Rijmen,Toz,Varıcı
pseudo-collision	compression function	all		-	-	Bagheri
pseudo-2nd preimage	compression	all		-	-	Bagheri

María Naya-Plasencia - Scrutinizing rebound attacks: new algorithms for improving the complexities

,2010

http://eprint.iacr.org/2010/607.pdf
Bibtex

Author : María Naya-Plasencia
Title : Scrutinizing rebound attacks: new algorithms for improving the complexities
In : -
Address :
Date : 2010

Meltem Sönmez Turan, Erdener Uyan - Practical Near-Collisions for Reduced Round Blake, Fugue, Hamsi and JH

,2010

http://csrc.nist.gov/groups/ST/hash/sha-3/Round2/Aug2010/documents/papers/TURAN_Paper_Erdener.pdf
Bibtex

Author : Meltem Sönmez Turan, Erdener Uyan
Title : Practical Near-Collisions for Reduced Round Blake, Fugue, Hamsi and JH
In : -
Address :
Date : 2010

Rishiraj Bhattacharyya, Avradip Mandal, Mridul Nandi - Security Analysis of the Mode of JH Hash Function

FSE ,2010

http://www.isical.ac.in/~rishi_r/FSE2010-146.pdf
Bibtex

Author : Rishiraj Bhattacharyya, Avradip Mandal, Mridul Nandi
Title : Security Analysis of the Mode of JH Hash Function
In : FSE -
Address :
Date : 2010

Vincent Rijmen, Denis Toz, Kerem Varıcı - Rebound Attack on Reduced-Round Versions of JH

FSE ,2010

http://www.cosic.esat.kuleuven.be/publications/article-1431.pdf
Bibtex

Author : Vincent Rijmen, Denis Toz, Kerem Varıcı
Title : Rebound Attack on Reduced-Round Versions of JH
In : FSE -
Address :
Date : 2010

Nasour Bagheri - Pseudo-collision and pseudo-second preimage on JH

,2008

http://ehash.iaik.tugraz.at/uploads/a/a8/Jh1.txt
Bibtex

Author : Nasour Bagheri
Title : Pseudo-collision and pseudo-second preimage on JH
In : -
Address :
Date : 2008

Florian Mendel, Søren S. Thomsen - An Observation on JH-512

,2008

http://ehash.iaik.tugraz.at/uploads/d/da/Jh_preimage.pdf
Bibtex

Author : Florian Mendel, Søren S. Thomsen
Title : An Observation on JH-512
In : -
Address :
Date : 2008

Hongjun Wu - The Complexity of Mendel and Thomsen's Preimage Attack on JH-512

,2009

http://ehash.iaik.tugraz.at/uploads/6/6f/Jh_mt_complexity.pdf
Bibtex

Author : Hongjun Wu
Title : The Complexity of Mendel and Thomsen's Preimage Attack on JH-512
In : -
Address :
Date : 2009

@@ Line 4: / Line 4: @@
 * Website: [http://www3.ntu.edu.sg/home/wuhj/research/jh/ http://www3.ntu.edu.sg/home/wuhj/research/jh/]
 * NIST submission package:
+** round 3: [http://csrc.nist.gov/groups/ST/hash/sha-3/Round3/documents/JH_FinalRnd.zip JH_FinalRnd.zip]
 ** round 1/2: [http://csrc.nist.gov/groups/ST/hash/sha-3/Round2/documents/JH_Round2.zip JH_Round2.zip] (old versions: [http://csrc.nist.gov/groups/ST/hash/sha-3/Round1/documents/JH.zip JH.zip], [http://csrc.nist.gov/groups/ST/hash/sha-3/Round1/documents/JHUpdate.zip JHUpdate.zip])
@@ Line 11: / Line 12: @@
    author    = {Hongjun Wu},
    title     = {The Hash Function JH},
-   url        = {http://icsd.i2r.a-star.edu.sg/staff/hongjun/jh/jh_round2.pdf},
+   url        = {http://www3.ntu.edu.sg/home/wuhj/research/jh/jh_round3.pdf},
+  howpublished = {Submission to NIST (round 3)},
+  year      = {2011},
+}
+</bibtex>
+<bibtex>
+@misc{sha3W09a,
+  author    = {Hongjun Wu},
+  title     = {The Hash Function JH},
+  url        = {http://ehash.iaik.tugraz.at/uploads/1/1d/Jh20090915.pdf},
+  howpublished = {Submission to NIST (updated for round 2)},
+  year      = {2009},
+}
+</bibtex>
+<bibtex>
+@misc{sha3W09,
+  author    = {Hongjun Wu},
+  title     = {The Hash Function JH},
+  url        = {http://ehash.iaik.tugraz.at/uploads/1/1f/Jh20090115.pdf},
    howpublished = {Submission to NIST (updated)},
    year      = {2009},
@@ Line 21: / Line 42: @@
    author    = {Hongjun Wu},
    title     = {The Hash Function JH},
-   url        = {http://icsd.i2r.a-star.edu.sg/staff/hongjun/jh/jh.pdf},
+   url        = {http://ehash.iaik.tugraz.at/uploads/8/8f/Jh.pdf},
    howpublished = {Submission to NIST},
    year      = {2008},
@@ Line 34: / Line 55: @@
 A description of the tables is given [http://ehash.iaik.tugraz.at/wiki/Cryptanalysis_Categories#Individual_Hash_Function_Tables here].
-Recommended security parameter: '''35.5''' rounds
+Recommended security parameter: '''42''' rounds
 === Hash function ===

Difference between revisions of "JH"

Revision as of 10:06, 21 March 2011

Contents

1 The algorithm

2 Cryptanalysis

2.1 Hash function

2.2 Building blocks

Navigation menu

Views

Personal tools

Navigation

Search

Tools