MD6

1 The algorithm

• Authors: Ron Rivest, Benjamin Agre, Daniel V. Bailey, Christopher Crutchfield, Yevgeniy Dodis, Kermin Elliott Fleming, Asif Khan, Jayant Krishnamurthy, Yuncheng Lin, Leo Reyzin, Emily Shen, Jim Sukha, Drew Sutherland, Eran Tromer, Yiqun Lisa Yin
• Website: http://groups.csail.mit.edu/cis/md6/
• NIST submission package: MD6.zip

Ronald L. Rivest - The MD6 hash function -- A proposal to NIST for SHA-3

,2008

http://groups.csail.mit.edu/cis/md6/submitted-2008-10-27/Supporting_Documentation/md6_report.pdf
Bibtex

Author : Ronald L. Rivest
Title : The MD6 hash function -- A proposal to NIST for SHA-3
In : -
Address :
Date : 2008

2 Cryptanalysis

Type of Analysis	Hash Function Part	Hash Size (n)	Parameters/Variants	Compression Function Calls	Memory Requirements	Reference
non-randomness	reduced compression		18 rounds	?	?	Aumasson,Meier
key-recovery	reduced compression		15 rounds	?	?	Dinur,Shamir
non-randomness	reduced permutation		30 rounds	?	?	Khovratovich
non-randomness	reduced permutation		33 rounds	?	?	Khovratovich
collision	reduced compression		16 rounds	230	-	Khazaei,Meier

A description of this table is given here.

Jean-Philippe Aumasson, Willi Meier - Personal communication (nonrandomness on the reduced-round compression function)

,2008

http://groups.csail.mit.edu/cis/md6/submitted-2008-10-27/Supporting_Documentation/md6_report.pdf
Bibtex

Author : Jean-Philippe Aumasson, Willi Meier
Title : Personal communication (nonrandomness on the reduced-round compression function)
In : -
Address :
Date : 2008

Itai Dinur, Adi Shamir - Personal communication (key recovery on the reduced-round compression function)

,2008

http://groups.csail.mit.edu/cis/md6/submitted-2008-10-27/Supporting_Documentation/md6_report.pdf
Bibtex

Author : Itai Dinur, Adi Shamir
Title : Personal communication (key recovery on the reduced-round compression function)
In : -
Address :
Date : 2008

Dimitry Khovratovich - Gaussian cryptanalysis of hash functions: collisions,

preimages, distinguishers

,2009

http://www.dagstuhl.de/Materials/index.en.phtml?09031#Khovratovich,%20Dimitry
Bibtex

Author : Dimitry Khovratovich
Title : Gaussian cryptanalysis of hash functions: collisions, preimages, distinguishers
In : -
Address :
Date : 2009

Dimitry Khovratovich - Nonrandomness of the 33-round MD6

,2009

http://fse2009rump.cr.yp.to/fe1a0e11287a9864c1d897a3110ebaa2.pdf
Bibtex

Author : Dimitry Khovratovich
Title : Nonrandomness of the 33-round MD6
In : -
Address :
Date : 2009

Shahram Khazaei, Willi Meier - Collisions for 16-round MD6

,2009

http://ehash.iaik.tugraz.at/uploads/9/91/Khazaei_md6.txt
Bibtex

Author : Shahram Khazaei, Willi Meier
Title : Collisions for 16-round MD6
In : -
Address :
Date : 2009