Difference between revisions of "RIPEMD"

From The ECRYPT Hash Function Website
Line 1: Line 1:
 
== Specification ==
 
== Specification ==
  
<!--
+
 
* digest size: 160 bits
+
* digest size: 128 bits
 
* max. message length: < 2<sup>64</sup> bits
 
* max. message length: < 2<sup>64</sup> bits
* compression function: 512-bit message block, 160-bit chaining variable
+
* compression function: 512-bit message block, 2 streams with each 128-bit chaining variable
 
* Specification:  
 
* Specification:  
-->
+
 
  
 
== Cryptanalysis ==
 
== Cryptanalysis ==

Revision as of 18:03, 10 March 2008

1 Specification

  • digest size: 128 bits
  • max. message length: < 264 bits
  • compression function: 512-bit message block, 2 streams with each 128-bit chaining variable
  • Specification:


2 Cryptanalysis

2.1 Best Known Results


2.2 Generic Attacks


2.3 Collision Attacks

Hans Dobbertin - {RIPEMD with Two-Round Compress Function is Not Collision-Free}

J. Cryptology 10(1):51-70,1997
http://dx.doi.org/10.1007/s001459900019
Bibtex
Author : Hans Dobbertin
Title : {RIPEMD with Two-Round Compress Function is Not Collision-Free}
In : J. Cryptology -
Address :
Date : 1997

2.4 Second Preimage Attacks


2.5 Preimage Attacks


2.6 Others