JAIST Repository >
b. 情報科学研究科・情報科学系 >
b10. 学術雑誌論文等 >
b10-1. 雑誌掲載論文 >

このアイテムの引用には次の識別子を使用してください: http://hdl.handle.net/10119/13465

タイトル: A Collision Attack on a Double-Block-Length Compression Function Instantiated with Round-Reduced AES-256
著者: Chen, Jiageng
Hirose, Shoichi
Kuwakado, Hidenori
Miyaji, Atsuko
キーワード: Double-block-length compression function
Free-start collision attack
Rebound attack
AES-256
発行日: 2015-03-17
出版者: Springer
誌名: Lecture Notes in Computer Science
巻: 8949
開始ページ: 271
終了ページ: 285
DOI: 10.1007/978-3-319-15943-0_17
抄録: This paper presents the first non-trivial collision attack on the double-block-length compression function presented at FSE 2006 instantiated with round-reduced AES-256: f_0(h_0∥h_1,M)∥f_1(h_0∥h_1,M) such that f_0(h_0∥h_1,M) =E_<h1∥M>(h_0)⊕h_0, f_1(h_0∥h_1,M) =E_<h_1∥M>(h_0⊕c)⊕h_0⊕c, where ∥ represents concatenation, E is AES-256 and c is a non-zero constant. The proposed attack is a free-start collision attack. It uses the rebound attack proposed by Mendel et al. It finds a collision with time complexity 2^8 , 2^<64> and 2^<120> for the instantiation with 6-round, 8-round and 9-round AES-256, respectively. The space complexity is negligible. The attack is effective against the instantiation with 6-/8-round AES-256 if the 16-byte constant c has a single non-zero byte. It is effective against the instantiation with 9-round AES-256 if the constant c has four non-zero bytes at some specific positions.
Rights: This is the author-created version of Springer, Jiageng Chen, Shoichi Hirose, Hidenori Kuwakado, and Atsuko Miyaji, Lecture Notes in Computer Science, 8949, 2015, 271-285. The original publication is available at www.springerlink.com, http://dx.doi.org/10.1007/978-3-319-15943-0_17
URI: http://hdl.handle.net/10119/13465
資料タイプ: author
出現コレクション:b10-1. 雑誌掲載論文 (Journal Articles)

このアイテムのファイル:

ファイル 記述 サイズ形式
21386.pdf131KbAdobe PDF見る/開く

当システムに保管されているアイテムはすべて著作権により保護されています。

 


お問い合わせ先 : 北陸先端科学技術大学院大学 研究推進課図書館情報係