Difference between revisions of "PANAMA"

From The ECRYPT Hash Function Website
(Specification)
(Generic Attacks)
 
(6 intermediate revisions by 2 users not shown)
Line 8: Line 8:
 
<bibtex>
 
<bibtex>
 
@inproceedings{fseDaemenC98,
 
@inproceedings{fseDaemenC98,
  owner    = {tnad},
 
 
   author    = {Joan Daemen and Craig S. K. Clapp},
 
   author    = {Joan Daemen and Craig S. K. Clapp},
 
   title    = {Fast Hashing and Stream Encryption with PANAMA},
 
   title    = {Fast Hashing and Stream Encryption with PANAMA},
Line 28: Line 27:
  
 
=== Best Known Results ===
 
=== Best Known Results ===
 +
 +
The best collision attack on PANAMA was presented by Daemen and Van Assche. The attack has a complexity of about attack 2<sup>6</sup> evaluations of the state updating function.
  
 
----
 
----
  
 
=== Generic Attacks ===
 
=== Generic Attacks ===
* [[GenericAttacksMerkleDamgaard| Generic Attacks on the Merkle-Damgaard Construction ]]
+
* PANAMA is not a design follwing the Merkle-Damgaard construction principle. [[GenericAttacksHash| Generic Attacks on Hash Functions]]
  
 
----
 
----
  
 
=== Collision Attacks ===
 
=== Collision Attacks ===
 +
 +
<bibtex>
 +
@inproceedings{fseDaemenA07,
 +
  author    = {Joan Daemen and Gilles Van Assche},
 +
  title    = {Producing Collisions for Panama, Instantaneously},
 +
  pages    = {1-18},
 +
  url        = {http://dx.doi.org/10.1007/978-3-540-74619-5_1},
 +
  editor    = {Alex Biryukov},
 +
  booktitle = {FSE},
 +
  publisher = {Springer},
 +
  series    = {LNCS},
 +
  volume    = {4593},
 +
  year      = {2007},
 +
  isbn      = {978-3-540-74617-1},
 +
  abstract  = {We present a practical attack on the Panama hash
 +
function that generates a collision in 2<sup>6</sup> evaluations of the state
 +
updating function. Our attack improves that of Rijmen and coworkers
 +
that had a complexity 2<sup>82</sup>, too high to produce a collision in practice.
 +
This improvement comes mainly from the use of techniques to transfer
 +
conditions on the state to message words instead of trying many message
 +
pairs and using the ones for which the conditions are satisfied. Our
 +
attack works for any arbitrary prefix message, followed by a pair of
 +
suffix messages with a given difference. We give an example of a collision
 +
and make the collision-generating program available. Our attack does not
 +
affect the Panama stream cipher, that is still unbroken to the best of our knowledge.},
 +
}
 +
</bibtex>
 +
 
<bibtex>
 
<bibtex>
 
@inproceedings{fseRijmenRPV01,
 
@inproceedings{fseRijmenRPV01,
  owner    = {tnad},
 
 
   author    = {Vincent Rijmen and Bart Van Rompay and Bart Preneel and Joos Vandewalle},
 
   author    = {Vincent Rijmen and Bart Van Rompay and Bart Preneel and Joos Vandewalle},
 
   title    = {Producing Collisions for PANAMA},
 
   title    = {Producing Collisions for PANAMA},

Latest revision as of 09:58, 12 March 2008

1 Specification

  • digest size: 256 bits
  • max. message length: arbitrary length
  • compression function: 256-bit message block, > 1 Kbyte chaining state
  • Specification:

Joan Daemen, Craig S. K. Clapp - Fast Hashing and Stream Encryption with PANAMA

FSE 1372:60-74,1998
http://link.springer.de/link/service/series/0558/bibs/1372/13720060.htm
Bibtex
Author : Joan Daemen, Craig S. K. Clapp
Title : Fast Hashing and Stream Encryption with PANAMA
In : FSE -
Address :
Date : 1998

2 Cryptanalysis

2.1 Best Known Results

The best collision attack on PANAMA was presented by Daemen and Van Assche. The attack has a complexity of about attack 26 evaluations of the state updating function.


2.2 Generic Attacks


2.3 Collision Attacks

Joan Daemen, Gilles Van Assche - Producing Collisions for Panama, Instantaneously

FSE 4593:1-18,2007
http://dx.doi.org/10.1007/978-3-540-74619-5_1
Bibtex
Author : Joan Daemen, Gilles Van Assche
Title : Producing Collisions for Panama, Instantaneously
In : FSE -
Address :
Date : 2007

Vincent Rijmen, Bart Van Rompay, Bart Preneel, Joos Vandewalle - Producing Collisions for PANAMA

FSE 2355:37-51,2002
http://link.springer.de/link/service/series/0558/bibs/2355/23550037.htm
Bibtex
Author : Vincent Rijmen, Bart Van Rompay, Bart Preneel, Joos Vandewalle
Title : Producing Collisions for PANAMA
In : FSE -
Address :
Date : 2002

2.4 Second Preimage Attacks


2.5 Preimage Attacks


2.6 Others