JAIST Repository >
b. 情報科学研究科・情報科学系 >
b10. 学術雑誌論文等 >
b10-1. 雑誌掲載論文 >
このアイテムの引用には次の識別子を使用してください:
http://hdl.handle.net/10119/13465
|
タイトル: | A Collision Attack on a Double-Block-Length Compression Function Instantiated with Round-Reduced AES-256 |
著者: | Chen, Jiageng Hirose, Shoichi Kuwakado, Hidenori Miyaji, Atsuko |
キーワード: | Double-block-length compression function Free-start collision attack Rebound attack AES-256 |
発行日: | 2015-03-17 |
出版者: | Springer |
誌名: | Lecture Notes in Computer Science |
巻: | 8949 |
開始ページ: | 271 |
終了ページ: | 285 |
DOI: | 10.1007/978-3-319-15943-0_17 |
抄録: | This paper presents the first non-trivial collision attack on the double-block-length compression function presented at FSE 2006 instantiated with round-reduced AES-256: f_0(h_0∥h_1,M)∥f_1(h_0∥h_1,M) such that f_0(h_0∥h_1,M) =E_<h1∥M>(h_0)⊕h_0, f_1(h_0∥h_1,M) =E_<h_1∥M>(h_0⊕c)⊕h_0⊕c, where ∥ represents concatenation, E is AES-256 and c is a non-zero constant. The proposed attack is a free-start collision attack. It uses the rebound attack proposed by Mendel et al. It finds a collision with time complexity 2^8 , 2^<64> and 2^<120> for the instantiation with 6-round, 8-round and 9-round AES-256, respectively. The space complexity is negligible. The attack is effective against the instantiation with 6-/8-round AES-256 if the 16-byte constant c has a single non-zero byte. It is effective against the instantiation with 9-round AES-256 if the constant c has four non-zero bytes at some specific positions. |
Rights: | This is the author-created version of Springer, Jiageng Chen, Shoichi Hirose, Hidenori Kuwakado, and Atsuko Miyaji, Lecture Notes in Computer Science, 8949, 2015, 271-285. The original publication is available at www.springerlink.com, http://dx.doi.org/10.1007/978-3-319-15943-0_17 |
URI: | http://hdl.handle.net/10119/13465 |
資料タイプ: | author |
出現コレクション: | b10-1. 雑誌掲載論文 (Journal Articles)
|
このアイテムのファイル:
ファイル |
記述 |
サイズ | 形式 |
21386.pdf | | 131Kb | Adobe PDF | 見る/開く |
|
当システムに保管されているアイテムはすべて著作権により保護されています。
|