RIPEMD with two-round compress function is not collision-free

Journal of Cryptology

Volumn 10, Issue 1, 1997, Pages 51-69

  Dobbertin, Hans ^a  

^a Federal Office for Information Security   (Germany)

Author keywords

Dedicated hash functions; ISO IEC 10118 3; MD4; RACE project; RIPEMD

Indexed keywords

EID: 0348175848     PISSN: 09332790     EISSN: None     Source Type: Journal    
DOI: 10.1007/s001459900019     Document Type: Article

References (6)

1. A. Bosselaers and B. Preneel (eds.), Integrity Primitives for Secure Information Systems, Final Report of RACE Integrity Primitives Evaluation (RIPE-RACE 1040), Chapter 3: RIPEMD, Lecture Notes in Computer Science, vol. 1007, Springer-Verlag, Berlin, 1995, pp. 69-111.
2. B. den Boer and A. Bosselaers, An attack on the last two rounds of MD4,Advances in Cryptology, CRYPTO '91, Lecture Notes in Computer Science, vol. 576, Springer-Verlag, Berlin, 1992, pp. 194-203.
3. H. Dobbertin, Cryptanalysis of MD4, Fast Software Encryption (Proceedings of the 1996 Cambridge Workshop on Cryptographic Algorithms), Lecture Notes in Computer Science, vol. 1039, Springer-Verlag, Berlin, 1996, pp. 53-69. (An extended version will appear in this journal.)
4. R. Rivest, The MD4 message-digest algorithm, Request for Comments (RFC) 1320, Internet Activities Board, Internet Privacy Task Force, April 1992.
5. R. Rivest, the MD5 message-digest algorithm, Request for Comments (RFC) 1321, Internet Activities Board, Internet Privacy Task Force, April 1992.
6. S. Vaudenay, On the need of multipermutations: Cryptanalysis of MD4 and SAFER, Fast Sofnvare Encryption (Proceedings of the 1994 Leuven Workshop on Cryptographic Algorithms), Lecture Notes in Computer Science, vol. 1008, Springer-Verlag, Berlin, 1995, pp. 286-297.