Difference between revisions of "PANAMA"
From The ECRYPT Hash Function Website
(→Specification) |
(→Generic Attacks) |
||
| (7 intermediate revisions by 2 users not shown) | |||
| Line 2: | Line 2: | ||
* digest size: 256 bits | * digest size: 256 bits | ||
| − | * max. message length: | + | * max. message length: arbitrary length |
| − | * compression function: | + | * compression function: 256-bit message block, > 1 Kbyte chaining state |
* Specification: | * Specification: | ||
<bibtex> | <bibtex> | ||
@inproceedings{fseDaemenC98, | @inproceedings{fseDaemenC98, | ||
| − | |||
author = {Joan Daemen and Craig S. K. Clapp}, | author = {Joan Daemen and Craig S. K. Clapp}, | ||
title = {Fast Hashing and Stream Encryption with PANAMA}, | title = {Fast Hashing and Stream Encryption with PANAMA}, | ||
| Line 28: | Line 27: | ||
=== Best Known Results === | === Best Known Results === | ||
| + | |||
| + | The best collision attack on PANAMA was presented by Daemen and Van Assche. The attack has a complexity of about attack 2<sup>6</sup> evaluations of the state updating function. | ||
---- | ---- | ||
=== Generic Attacks === | === Generic Attacks === | ||
| − | * [[ | + | * PANAMA is not a design follwing the Merkle-Damgaard construction principle. [[GenericAttacksHash| Generic Attacks on Hash Functions]] |
---- | ---- | ||
=== Collision Attacks === | === Collision Attacks === | ||
| + | |||
| + | <bibtex> | ||
| + | @inproceedings{fseDaemenA07, | ||
| + | author = {Joan Daemen and Gilles Van Assche}, | ||
| + | title = {Producing Collisions for Panama, Instantaneously}, | ||
| + | pages = {1-18}, | ||
| + | url = {http://dx.doi.org/10.1007/978-3-540-74619-5_1}, | ||
| + | editor = {Alex Biryukov}, | ||
| + | booktitle = {FSE}, | ||
| + | publisher = {Springer}, | ||
| + | series = {LNCS}, | ||
| + | volume = {4593}, | ||
| + | year = {2007}, | ||
| + | isbn = {978-3-540-74617-1}, | ||
| + | abstract = {We present a practical attack on the Panama hash | ||
| + | function that generates a collision in 2<sup>6</sup> evaluations of the state | ||
| + | updating function. Our attack improves that of Rijmen and coworkers | ||
| + | that had a complexity 2<sup>82</sup>, too high to produce a collision in practice. | ||
| + | This improvement comes mainly from the use of techniques to transfer | ||
| + | conditions on the state to message words instead of trying many message | ||
| + | pairs and using the ones for which the conditions are satisfied. Our | ||
| + | attack works for any arbitrary prefix message, followed by a pair of | ||
| + | suffix messages with a given difference. We give an example of a collision | ||
| + | and make the collision-generating program available. Our attack does not | ||
| + | affect the Panama stream cipher, that is still unbroken to the best of our knowledge.}, | ||
| + | } | ||
| + | </bibtex> | ||
| + | |||
<bibtex> | <bibtex> | ||
@inproceedings{fseRijmenRPV01, | @inproceedings{fseRijmenRPV01, | ||
| − | |||
author = {Vincent Rijmen and Bart Van Rompay and Bart Preneel and Joos Vandewalle}, | author = {Vincent Rijmen and Bart Van Rompay and Bart Preneel and Joos Vandewalle}, | ||
title = {Producing Collisions for PANAMA}, | title = {Producing Collisions for PANAMA}, | ||
Latest revision as of 09:58, 12 March 2008
Contents
1 Specification
- digest size: 256 bits
- max. message length: arbitrary length
- compression function: 256-bit message block, > 1 Kbyte chaining state
- Specification:
Joan Daemen, Craig S. K. Clapp - Fast Hashing and Stream Encryption with PANAMA
- FSE 1372:60-74,1998
- http://link.springer.de/link/service/series/0558/bibs/1372/13720060.htm
BibtexAuthor : Joan Daemen, Craig S. K. Clapp
Title : Fast Hashing and Stream Encryption with PANAMA
In : FSE -
Address :
Date : 1998
2 Cryptanalysis
2.1 Best Known Results
The best collision attack on PANAMA was presented by Daemen and Van Assche. The attack has a complexity of about attack 26 evaluations of the state updating function.
2.2 Generic Attacks
- PANAMA is not a design follwing the Merkle-Damgaard construction principle. Generic Attacks on Hash Functions
2.3 Collision Attacks
Joan Daemen, Gilles Van Assche - Producing Collisions for Panama, Instantaneously
- FSE 4593:1-18,2007
- http://dx.doi.org/10.1007/978-3-540-74619-5_1
BibtexAuthor : Joan Daemen, Gilles Van Assche
Title : Producing Collisions for Panama, Instantaneously
In : FSE -
Address :
Date : 2007
Vincent Rijmen, Bart Van Rompay, Bart Preneel, Joos Vandewalle - Producing Collisions for PANAMA
- FSE 2355:37-51,2002
- http://link.springer.de/link/service/series/0558/bibs/2355/23550037.htm
BibtexAuthor : Vincent Rijmen, Bart Van Rompay, Bart Preneel, Joos Vandewalle
Title : Producing Collisions for PANAMA
In : FSE -
Address :
Date : 2002
