Luffa

1 The algorithm

• Author(s): Christophe De Canniere, Hisayoshi Sato, Dai Watanabe
• Website: http://www.sdl.hitachi.co.jp/crypto/luffa/
• NIST submission package: Luffa.zip, LuffaUpdate.zip

Christophe De Canniere, Hisayoshi Sato, Dai Watanabe - Hash Function Luffa: Specification

,2008

http://ehash.iaik.tugraz.at/uploads/e/ea/Luffa_Specification.pdf
Bibtex

Author : Christophe De Canniere, Hisayoshi Sato, Dai Watanabe
Title : Hash Function Luffa: Specification
In : -
Address :
Date : 2008

Christophe De Canniere, Hisayoshi Sato, Dai Watanabe - Hash Function Luffa: Supporting Document

,2008

http://ehash.iaik.tugraz.at/uploads/f/fe/Luffa_SupportingDocument.pdf
Bibtex

Author : Christophe De Canniere, Hisayoshi Sato, Dai Watanabe
Title : Hash Function Luffa: Supporting Document
In : -
Address :
Date : 2008

2 Cryptanalysis

Type of Analysis	Hash Function Part	Hash Size (n)	Parameters/Variants	Compression Function Calls	Memory Requirements	Reference
pseudo-2nd preimage	hash	all		1	-	Jia
pseudo-preimage	hash	256		2127	-	Jia
pseudo-preimage	hash	512		2171	-	Jia
distinguisher	permutation		4 rounds	?	-	Aumasson,Meier

A description of this table is given here.

Keting Jia - Pseudo-Collision, Pseudo-Preimage and Pseudo-Second-Preimage Attacks on Luffa

,2009

http://eprint.iacr.org/2009/224.pdf
Bibtex

Author : Keting Jia
Title : Pseudo-Collision, Pseudo-Preimage and Pseudo-Second-Preimage Attacks on Luffa
In : -
Address :
Date : 2009

Jean-Philippe Aumasson, Willi Meier - Zero-sum distinguishers for reduced Keccak-f and for the core functions of Luffa and Hamsi

,2009

http://www.131002.net/data/papers/AM09.pdf
Bibtex

Author : Jean-Philippe Aumasson, Willi Meier
Title : Zero-sum distinguishers for reduced Keccak-f and for the core functions of Luffa and Hamsi
In : -
Address :
Date : 2009