Difference between revisions of "The SHA-3 Zoo"

From The ECRYPT Hash Function Website
m
(tables updated)
 
(54 intermediate revisions by 6 users not shown)
Line 1: Line 1:
−
The SHA-3 Zoo (work in progress) is a collection of cryptographic hash functions (in alphabetical order) submitted to the [http://www.nist.gov/hash-competition SHA-3 contest] (see also [http://en.wikipedia.org/wiki/SHA-3 here]). It aims to provide an overview of design and cryptanalysis of all submissions. A list of all [[SHA-3 submitters]] is also available. For a software performance related overview, see [http://bench.cr.yp.to/ebash.html eBASH]. At a separate page, we also collect [[SHA-3_Hardware_Implementations | hardware implementation results]] of the candidates. Another categorization of the SHA-3 submissions can be found [http://www.uni-weimar.de/cms/fileadmin/medien/medsicherheit/Research/SHA3/Classification_of_the_SHA-3_Candidates.pdf here].
+
The SHA-3 Zoo (work in progress) is a collection of cryptographic hash functions (in alphabetical order) submitted to the [http://www.nist.gov/hash-competition SHA-3 contest] (see also [http://en.wikipedia.org/wiki/SHA-3 here]). It aims to provide an overview of design and cryptanalysis of all submissions. A list of all [[SHA-3 submitters]] is also available. For a software performance related overview, see [http://bench.cr.yp.to/ebash.html eBASH]. At a separate page, we also collect [[SHA-3_Hardware_Implementations | hardware implementation results]] of the candidates. Another categorization of the SHA-3 submissions can be found [http://eprint.iacr.org/2008/511.pdf here].
−
<br><br>
+
 
 
The idea of the SHA-3 Zoo is to give a good overview of cryptanalytic results. We try to avoid additional judgement whether a submission is broken. The answer to this question is left to NIST. However, we categorize the cryptanalytic results by their impact from very theoretic to practical attacks. A detailed description is given in [[Cryptanalysis Categories]].
 
The idea of the SHA-3 Zoo is to give a good overview of cryptanalytic results. We try to avoid additional judgement whether a submission is broken. The answer to this question is left to NIST. However, we categorize the cryptanalytic results by their impact from very theoretic to practical attacks. A detailed description is given in [[Cryptanalysis Categories]].
  
−
At this time, 55 out of 64 submissions to the SHA-3 competition are publicly known and available. 51 submissions have advanced to the first round.
+
At this time, 56 out of 64 submissions to the SHA-3 competition are publicly known and available. 51 submissions have advanced to [http://csrc.nist.gov/groups/ST/hash/sha-3/Round1/index.html round 1], 14 submissions have made it into [http://csrc.nist.gov/groups/ST/hash/sha-3/Round2/index.html round 2] and 5 candidates have been selected for the [http://csrc.nist.gov/groups/ST/hash/sha-3/Round3/index.html final].
−
So far, 3 out of 51 first round candidates have been officially conceded broken or withdrawn by the designers.
 
  
−
The following table should give a first impression on the remaining SHA-3 candidates. It shows only the best known attack, more detailed results are collected at the individual hash function pages. A description of the main table is given [http://ehash.iaik.tugraz.at/wiki/Cryptanalysis_Categories#Main_Cryptanalysis_Table here].
+
The following tables give a first impression on the cryptanalysis of the SHA-3 candidates. The tables only show the best known attack, more detailed results are collected at the individual hash function pages. A description of the main table is given [[Cryptanalysis_Categories#Main_Cryptanalysis_Table | here]].
  
 
[http://ehash.iaik.tugraz.at/index.php?title=Special:Recentchangeslinked&target=The_SHA-3_Zoo&days=7&limit=50&hideminor=1 Recent updates of the SHA-3 Zoo]
 
[http://ehash.iaik.tugraz.at/index.php?title=Special:Recentchangeslinked&target=The_SHA-3_Zoo&days=7&limit=50&hideminor=1 Recent updates of the SHA-3 Zoo]
 +
(Your analysis is not mentioned? Drop a line at sha3zoo@iaik.tugraz.at to let us know!)
  
 +
 +
 +
Keccak has been selected as the SHA-3 standard:
  
 
{| border="1" cellpadding="4" cellspacing="0" align="center" class="wikitable" style="text-align:center"
 
{| border="1" cellpadding="4" cellspacing="0" align="center" class="wikitable" style="text-align:center"
 
|- style="background:#efefef;"
 
|- style="background:#efefef;"
−
! width="120"| Hash Name !! width="160" | Principal Submitter !! width="120"| Best Attack on Main NIST Requirements !! width="120"| Best Attack on other Hash Requirements
+
! width="120"| Hash Name !! width="160" | Principal Submitter !! width="150"| Best Attack on Main NIST Requirements !! width="140"| Best Attack on other Hash Requirements
 
|-
 
|-
−
| [[Abacus]]      || Neil Sholer || style="background:orange" | 2nd-preimage ||
+
| [[Keccak]]      || The Keccak Team || ||
−
|-
 
−
| [[ARIRANG]]      || Jongin Lim || ||
 
 
|-                                                                                                             
 
|-                                                                                                             
−
| [[AURORA]]      || Masahiro Fujita (Sony) || ||
+
|}
 +
 
 +
 
 +
 
 +
 
 +
The other 4 finalists of the SHA-3 competition are:
 +
 
 +
{| border="1" cellpadding="4" cellspacing="0" align="center" class="wikitable" style="text-align:center"
 +
|- style="background:#efefef;"
 +
! width="120"| Hash Name !! width="160" | Principal Submitter !! width="150"| Best Attack on Main NIST Requirements !! width="140"| Best Attack on other Hash Requirements
 
|-
 
|-
 
| [[BLAKE]]        || Jean-Philippe Aumasson || ||
 
| [[BLAKE]]        || Jean-Philippe Aumasson || ||
 
|-
 
|-
−
| [[Blender]]     || Dr. Colin Bradbury || style="background:orange" | preimage ||
+
| [[Groestl|Grøstl]] || Lars R. Knudsen || ||
 +
|-
 +
| [[JH]]          || Hongjun Wu || style="background:greenyellow" | preimage ||
 +
|-                                                                                                           
 +
| [[Skein]]        || Bruce Schneier || ||
 
|-                                                                                                             
 
|-                                                                                                             
 +
|}
 +
 +
 +
 +
 +
The following SHA-3 candidates advanced to round 2 but did not get into the final:
 +
 +
[http://ehash.iaik.tugraz.at/uploads/c/ce/20090922-2230_SHA-3_round2_tweaks.pdf Round 2 tweaks for all candidates]
 +
 +
 +
{| border="1" cellpadding="4" cellspacing="0" align="center" class="wikitable" style="text-align:center"
 +
|- style="background:#efefef;"
 +
! width="120"| Hash Name !! width="160" | Principal Submitter !! width="150"| Best Attack on Main NIST Requirements !! width="140"| Best Attack on other Hash Requirements
 +
|-
 
| [[Blue Midnight Wish]] || Svein Johan Knapskog || ||
 
| [[Blue Midnight Wish]] || Svein Johan Knapskog || ||
 
|-
 
|-
−
| [[Cheetah]]     || Dmitry Khovratovich || || length-extension
+
| [[CubeHash]]     || Daniel J. Bernstein || style="background:greenyellow" | preimage ||
 
|-
 
|-
−
| [[CHI]]         || Phillip Hawkes || ||
+
| [[ECHO]]         || Henri Gilbert || ||
 +
|-                                                                                                           
 +
| [[Fugue]]        || Charanjit S. Jutla || ||
 
|-                                                                                                             
 
|-                                                                                                             
−
| [[CRUNCH]]       || Jacques Patarin || ||
+
| [[Hamsi]]       || <nowiki>Özgül Kü&#231;ük</nowiki> || ||
 
|-
 
|-
−
| [[CubeHash]]     || D. J. Bernstein || style="background:greenyellow" | preimage ||
+
| [[Luffa]]       || Dai Watanabe || ||
−
|-
 
−
| [[DCH]]          || David A. Wilson || style="background:red" | collision ||
 
−
|-                                                                                                           
 
−
| [[Dynamic SHA]]  || Xu Zijie || || length-extension
 
 
|-
 
|-
−
| [[Dynamic SHA2]] || Xu Zijie || || length-extension
+
| [[Shabal]]       || <nowiki>Jean-Fran&#231;ois Misarsky</nowiki> || ||
 
|-
 
|-
−
| [[ECHO]]        || Henri Gilbert || ||
+
| [[SHAvite-3]]   || Orr Dunkelman || ||
−
|-                                                                                                            
 
−
| [[ECOH]]         || Daniel R. L. Brown || ||
 
 
|-
 
|-
−
| [[Edon-R (SHA-3 submission)|Edon-R]] || Danilo Gligoroski || style="background:yellow" | preimage ||
+
| [[SIMD]]         || <nowiki>Ga&#235;tan Leurent</nowiki> || ||
 
|-
 
|-
−
| [[EnRUPT]]      || Sean O’Neil || style="background:red" | collision ||
+
|}
−
|-                                                                                                            
+
 
−
| [[ESSENCE]]      || Jason Worth Martin || ||
+
 
 +
 
 +
 
 +
 
 +
The following submitted hash functions have not advanced to round 2:
 +
 
 +
{| border="1" cellpadding="4" cellspacing="0" align="center" class="wikitable" style="text-align:center"
 +
|- style="background:#efefef;"
 +
! width="120"| Hash Name !! width="160" | Principal Submitter !! width="120" | Status !! width="150"| Best Attack on Main NIST Requirements !! width="140"| Best Attack on other Hash Requirements
 
|-
 
|-
−
| [[FSB (SHA-3 submission) | FSB]] || Matthieu Finiasz || ||
+
| [[Abacus]]     || Neil Sholer || in round 1 || style="background:orange" | 2nd-preimage ||
 
|-
 
|-
−
| [[Fugue]]       || Charanjit S. Jutla || ||
+
| [[ARIRANG]]     || Jongin Lim || in round 1 || ||
 
|-                                                                                                             
 
|-                                                                                                             
−
| [[Groestl|Grøstl]] || Lars Ramkilde Knudsen || ||
+
| [[AURORA]]       || Masahiro Fujita  || in round 1|| style="background:orange"| 2nd preimage  ||
 
|-
 
|-
−
| [[Hamsi]]       || Ozgul Kucuk || ||
+
| [[Blender]]     || Colin Bradbury || in round 1|| style="background:orange" | collision, preimage  || near-collision
 +
|- 
 +
| [[Boole]]      || Greg Rose || in round 1 || style="background:red" | collision ||
 +
|-                                                                                                         
 +
| [[Cheetah]]      || Dmitry Khovratovich || in round 1||  || length-extension
 
|-
 
|-
−
| [[JH]]           || Hongjun Wu || style="background:greenyellow" | preimage ||
+
| [[CHI]]         || Phillip Hawkes || in round 1|| ||
 
|-                                                                                                             
 
|-                                                                                                             
−
| [[Keccak]]      || Joan Daemen || ||
+
| [[CRUNCH]]      || Jacques Patarin || in round 1|| || length-extension
 
|-
 
|-
−
| [[Khichidi-1]]   || M Vidyasagar || style="background:red" | collision ||
+
| [[DCH]]         || David A. Wilson || in round 1 || style="background:red" | collision ||
 
|-
 
|-
−
| [[LANE]]         || Sebastiann Indesteege || ||
+
| [[Dynamic SHA]] || Xu Zijie || in round 1|| style="background:red"|collision || length-extension
−
|-                       
 
−
| [[Lesamnta]]    || Hirotaka Yoshida || ||
 
 
|-
 
|-
−
| [[Luffa]]       || Dai Watanabe || ||
+
| [[Dynamic SHA2]] || Xu Zijie || in round 1|| style="background:orange"|collision  || length-extension
 
|-
 
|-
−
| [[LUX]]         || Ivica Nikolic || ||
+
| [[ECOH]]         || Daniel R. L. Brown || in round 1|| style="background:orange"| 2nd preimage ||
−
|-                                                                                                           
 
−
| [[MCSSHA-3]]    || Mikhail Maslennikov || style="background:yellow" | collision ||
 
 
|-
 
|-
−
| [[MD6]]         || Ronald L. Rivest || ||
+
| [[Edon-R (SHA-3 submission)|Edon-R]] || Danilo Gligoroski || in round 1|| style="background:yellow" | preimage ||
 
|-
 
|-
−
| [[MeshHash]]     || Björn Fay || style="background:yellow" | 2nd preimage ||
+
| [[EnRUPT]]       || Sean O'Neil || in round 1|| style="background:red" | collision ||
 
|-                                                                                                             
 
|-                                                                                                             
−
| [[NaSHA]]       || Smile Markovski || style="background:yellow" | collision ||
+
| [[ESSENCE]]     || Jason Worth Martin || in round 1|| style="background:orange" | collision ||
 
|-
 
|-
−
| [[SANDstorm]]   || Rich Schroeppel || ||
+
| [[FSB (SHA-3 submission) | FSB]] || Matthieu Finiasz || in round 1|| ||
 
|-
 
|-
−
| [[Sarmal]]       || Kerem VARICI || style="background:yellow" | preimage ||
+
| [[HASH 2X]]     || Jason Lee || not in round 1 || style="background:red" | 2nd-preimage ||
−
|-                                                                                                           
 
−
| [[Sgàil]]        || Peter Maxwell|| style="background:red" | collision ||
 
 
|-
 
|-
−
| [[Shabal]]       || Jean-Francois Misarsky || ||
+
| [[Khichidi-1]] || M. Vidyasagar || in round 1 || style="background:red" | collision ||
 
|-
 
|-
−
| [[SHAMATA]]     || Orhun Kara || ||
+
| [[LANE]]         || Sebastiaan Indesteege || in round 1|| ||
 
|-                         
 
|-                         
−
| [[SHAvite-3]]    || Orr Dunkelman || ||
+
| [[Lesamnta]]    || Hirotaka Yoshida || in round 1|| ||
 +
|-
 +
| [[LUX]]          || <nowiki>Ivica Nikoli&#263;</nowiki> || in round 1|| style="background:orange" | collision, 2nd preimage || DRBG,HMAC
 +
|-           
 +
| [[Maraca]]      || Robert J. Jenkins || not in round 1 || style="background:red" | preimage ||
 +
|- 
 +
| [[MCSSHA-3]]    || Mikhail Maslennikov || in round 1|| style="background:orange" | 2nd preimage ||
 +
|-                                                                                           
 +
| [[MD6]]          || Ronald L. Rivest || in round 1|| ||
 +
|-   
 +
| [[MeshHash]]    || Björn Fay || in round 1 || style="background:orange" | 2nd preimage ||
 +
|-                                                                                                       
 +
| [[NaSHA]]        || Smile Markovski || in round 1|| style="background:orange" | collision ||
 
|-
 
|-
−
| [[SIMD]]         || Gaetan Leurent || ||
+
| [[NKS2D]]       || Geoffrey Park || not in round 1 || style="background:red" | collision ||
 
|-
 
|-
−
| [[Skein]]       || Bruce Schneier || ||
+
| [[Ponic]]       || Peter Schmidt-Nielsen || not in round 1 || style="background:yellow" | 2nd-preimage
−
|-                                                                                                            
 
−
| [[Spectral Hash]] || Cetin Kaya Koc || ||
 
 
|-
 
|-
−
| [[StreamHash]]   || Michal Trojnara || style="background:red" | collision ||
+
| [[SANDstorm]]   || Rich Schroeppel || in round 1|| ||
 
|-
 
|-
−
| [[SWIFFTX]]     || Daniele Micciancio || ||
+
| [[Sarmal]]       || <nowiki>Kerem Var&#305;c&#305;</nowiki> || in round 1||  style="background:yellow" | preimage ||
 
|-                                                                                                             
 
|-                                                                                                             
−
| [[Tangle]]       || Rafael Alvarez || style="background:red" | collision ||
+
| [[Sgàil]]       || Peter Maxwell|| in round 1|| style="background:red" | collision ||
 
|-
 
|-
−
| [[TIB3]]         || Daniel Penazzi || ||
+
| [[SHAMATA]]     || Orhun Kara || in round 1 || style="background:red" | collision ||
 
|-
 
|-
−
| [[Twister]]     || Michael Gorski || style="background:yellow" | 2nd preimage ||
+
| [[Spectral Hash]] || <nowiki>&#199;etin Kaya Ko&#231;</nowiki> || in round 1|| style="background:red" | collision ||
−
|-                                                                                                            
+
|-
−
| [[Vortex (SHA-3 submission)|Vortex]] || Michael Kounavis || style="background:yellow" | preimage ||
+
| [[StreamHash]]   || Michal Trojnara || in round 1 || style="background:red" | collision ||
−
|}
 
−
 
 
−
 
 
−
 
 
−
The following hash functions have been submitted to the NIST competition but did not advance to the first round or have been conceded broken by the designers:
 
−
 
 
−
{| border="1" cellpadding="4" cellspacing="0" align="center" class="wikitable" style="text-align:center"
 
−
|- style="background:#efefef;"
 
−
! width="120"| Hash Name !! width="160" | Principal Submitter !! width="120" | Status !! width="120" | Best Attack on Main NIST Requirements
 
 
|-
 
|-
−
| [[Boole]]       || Greg Rose || conceded broken || style="background:red" | collision
+
| [[SWIFFTX]]     || Daniele Micciancio || in round 1|| ||
 
|-
 
|-
−
| [[HASH 2X]]     || || not in round 1 || style="background:red" | 2nd-preimage
+
| [[Tangle]]     || Rafael Alvarez || in round 1 || style="background:red" | collision ||
 
|-
 
|-
−
| [[Maraca]]     || || not in round 1 ||
+
| [[TIB3]]         || Daniel Penazzi || in round 1|| style="background:yellow" | collision ||
 
|-
 
|-
−
| [[NKS2D]]       || || not in round 1 || style="background:red" | collision
+
| [[Twister]]     || Michael Gorski || in round 1|| style="background:orange" | preimage ||
 +
|-                                                                                                           
 +
| [[Vortex (SHA-3 submission)|Vortex]] || Michael Kounavis || in round 1|| style="background:yellow" | preimage ||
 
|-
 
|-
−
| [[Ponic]]       || || not in round 1 || style="background:yellow" | 2nd-preimage
+
| [[WaMM]]       || John Washburn || in round 1 || style="background:red" | collision ||
 
|-
 
|-
−
| [[WaMM]]       || John Washburn || conceded broken || style="background:red" | collision
+
| [[Waterfall]]   || Bob Hattersley || in round 1 || style="background:orange" | collision ||
 
|-
 
|-
−
| [[Waterfall]]   || Bob Hattersley || conceded broken || style="background:orange" | collision
+
| [[ZK-Crypt]]       || Carmi Gressel || not in round 1 || ||
 
|}
 
|}
−
 
−
 
−
Your analysis is not mentioned? Drop a line at sha3zoo@iaik.tugraz.at to let us know!
 

Latest revision as of 16:32, 28 January 2013

The SHA-3 Zoo (work in progress) is a collection of cryptographic hash functions (in alphabetical order) submitted to the SHA-3 contest (see also here). It aims to provide an overview of design and cryptanalysis of all submissions. A list of all SHA-3 submitters is also available. For a software performance related overview, see eBASH. At a separate page, we also collect hardware implementation results of the candidates. Another categorization of the SHA-3 submissions can be found here.

The idea of the SHA-3 Zoo is to give a good overview of cryptanalytic results. We try to avoid additional judgement whether a submission is broken. The answer to this question is left to NIST. However, we categorize the cryptanalytic results by their impact from very theoretic to practical attacks. A detailed description is given in Cryptanalysis Categories.

At this time, 56 out of 64 submissions to the SHA-3 competition are publicly known and available. 51 submissions have advanced to round 1, 14 submissions have made it into round 2 and 5 candidates have been selected for the final.

The following tables give a first impression on the cryptanalysis of the SHA-3 candidates. The tables only show the best known attack, more detailed results are collected at the individual hash function pages. A description of the main table is given here.

Recent updates of the SHA-3 Zoo (Your analysis is not mentioned? Drop a line at sha3zoo@iaik.tugraz.at to let us know!)


Keccak has been selected as the SHA-3 standard:

Hash Name Principal Submitter Best Attack on Main NIST Requirements Best Attack on other Hash Requirements
Keccak The Keccak Team



The other 4 finalists of the SHA-3 competition are:

Hash Name Principal Submitter Best Attack on Main NIST Requirements Best Attack on other Hash Requirements
BLAKE Jean-Philippe Aumasson
Grøstl Lars R. Knudsen
JH Hongjun Wu preimage
Skein Bruce Schneier



The following SHA-3 candidates advanced to round 2 but did not get into the final:

Round 2 tweaks for all candidates


Hash Name Principal Submitter Best Attack on Main NIST Requirements Best Attack on other Hash Requirements
Blue Midnight Wish Svein Johan Knapskog
CubeHash Daniel J. Bernstein preimage
ECHO Henri Gilbert
Fugue Charanjit S. Jutla
Hamsi Özgül Küçük
Luffa Dai Watanabe
Shabal Jean-François Misarsky
SHAvite-3 Orr Dunkelman
SIMD Gaëtan Leurent



The following submitted hash functions have not advanced to round 2:

Hash Name Principal Submitter Status Best Attack on Main NIST Requirements Best Attack on other Hash Requirements
Abacus Neil Sholer in round 1 2nd-preimage
ARIRANG Jongin Lim in round 1
AURORA Masahiro Fujita in round 1 2nd preimage
Blender Colin Bradbury in round 1 collision, preimage near-collision
Boole Greg Rose in round 1 collision
Cheetah Dmitry Khovratovich in round 1 length-extension
CHI Phillip Hawkes in round 1
CRUNCH Jacques Patarin in round 1 length-extension
DCH David A. Wilson in round 1 collision
Dynamic SHA Xu Zijie in round 1 collision length-extension
Dynamic SHA2 Xu Zijie in round 1 collision length-extension
ECOH Daniel R. L. Brown in round 1 2nd preimage
Edon-R Danilo Gligoroski in round 1 preimage
EnRUPT Sean O'Neil in round 1 collision
ESSENCE Jason Worth Martin in round 1 collision
FSB Matthieu Finiasz in round 1
HASH 2X Jason Lee not in round 1 2nd-preimage
Khichidi-1 M. Vidyasagar in round 1 collision
LANE Sebastiaan Indesteege in round 1
Lesamnta Hirotaka Yoshida in round 1
LUX Ivica Nikolić in round 1 collision, 2nd preimage DRBG,HMAC
Maraca Robert J. Jenkins not in round 1 preimage
MCSSHA-3 Mikhail Maslennikov in round 1 2nd preimage
MD6 Ronald L. Rivest in round 1
MeshHash Björn Fay in round 1 2nd preimage
NaSHA Smile Markovski in round 1 collision
NKS2D Geoffrey Park not in round 1 collision
Ponic Peter Schmidt-Nielsen not in round 1 2nd-preimage
SANDstorm Rich Schroeppel in round 1
Sarmal Kerem Varıcı in round 1 preimage
Sgàil Peter Maxwell in round 1 collision
SHAMATA Orhun Kara in round 1 collision
Spectral Hash Çetin Kaya Koç in round 1 collision
StreamHash Michal Trojnara in round 1 collision
SWIFFTX Daniele Micciancio in round 1
Tangle Rafael Alvarez in round 1 collision
TIB3 Daniel Penazzi in round 1 collision
Twister Michael Gorski in round 1 preimage
Vortex Michael Kounavis in round 1 preimage
WaMM John Washburn in round 1 collision
Waterfall Bob Hattersley in round 1 collision
ZK-Crypt Carmi Gressel not in round 1
Retrieved from "https://ehash.iaik.tugraz.at/index.php?title=The_SHA-3_Zoo&oldid=3766"