Cryptanalysis on HMAC/NMAC-MD5 and MD5-MAC

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5479 LNCS, Issue , 2009, Pages 121-133

  Xiaoyun, Wang ^a,b   Hongbo, Yu ^a   Wei, Wang ^b   Haina, Zhang ^b   Tao, Zhan ^b  

^a TSINGHUA UNIVERSITY   (China)

^b SHANDONG UNIVERSITY   (China)

Author keywords

Distinguishing attack; HMAC; Key recovery; MD5; MDx MAC; NMAC

Indexed keywords

DISTINGUISHING ATTACK; HMAC; KEY RECOVERY; MD5; MDX-MAC; NMAC;

SECURITY OF DATA;

CRYPTOGRAPHY;

EID: 67650667840     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-01001-9_7     Document Type: Conference Paper

References (20)

1. Bellare, M., Canetti, R., Krawczyk, H.: Keying hash functions for message authentication. In: Koblitz, N. (ed.) CRYPTO 1996. LNCS, vol.1109, pp. 1-15. Springer, Heidelberg (1996) (Pubitemid 126106226)
2. Bellare, M.: New Proofs for NMAC and HMAC: Security without collisionresistance. In: Dwork, C. (ed.) CRYPTO 2006. LNCS, vol.4117, pp. 602-619. Springer, Heidelberg (2006) (Pubitemid 44532141)
3. Biham, E., Chen, R.: Near-collisions of SHA-0. In: Franklin, M. (ed.) CRYPTO 2004. LNCS, vol.3152, pp. 290-305. Springer, Heidelberg (2004)
4. Biham, E., Chen, R., Joux, A., Carribault, P., Lemuet, C., Jalby, W.: Collisions of SHA-0 and reduced SHA-1. In: Cramer, R. (ed.) EUROCRYPT 2005. LNCS, vol.3494, pp. 36-57. Springer, Heidelberg (2005) (Pubitemid 41313945)
5. Den Boer, B., Bosselaers, A.: Collisions for the compression function of MD5. In: Helleseth, T. (ed.) EUROCRYPT 1993. LNCS, vol.765, pp. 293-304. Springer, Heidelberg (1994)
6. Contini, S., Yin, Y.L.: Forgery and partial key-recovery attacks on HMAC and NMAC using hash collisions. In: Lai, X., Chen, K. (eds.) ASIACRYPT 2006. LNCS, vol.4284, pp. 37-53. Springer, Heidelberg (2006)
7. Fouque, P.-A., Leurent, G., Nguyen, P.Q.: Full key-recovery attacks on HMAC/NMAC-MD4 and NMAC-MD5. In: Menezes, A. (ed.) CRYPTO 2007. LNCS, vol.4622, pp. 13-30. Springer, Heidelberg (2007)
8. Galvin, J.M., McCloghrie, K., Davin, J.R.: Secure management of SNMP networks. Integrated Network Management II, 703-714 (1991)
9. Kim, J.-S., Biryukov, A., Preneel, B., Hong, S.H.: On the security of HMAC and NMAC based on HAVAL, MD4, MD5, SHA-0 and SHA-1 (Extended abstract). In: De Prisco, R., Yung, M. (eds.) SCN 2006. LNCS, vol.4116, pp. 242-256. Springer, Heidelberg (2006) (Pubitemid 44568303)
10. Preneel, B., Van Oorschot, P.: MDx-MAC and building fast MACs from hash functions. In: Coppersmith, D. (ed.) CRYPTO 1995. LNCS, vol.963, pp. 1-14. Springer, Heidelberg (1995)
11. Rechberger, C., Rijmen, V.: On authentication with HMAC and non-random properties. In: Dietrich, S., Dhamija, R. (eds.) FC 2007. LNCS, vol.4886, pp. 119-133. Springer, Heidelberg (2007) (Pubitemid 351153048)
12. Rechberger, C., Rijmen, V.: New results on NMAC/HMAC when instantiated with popular hash functions. Journal of Universal Computer Science 14(3), 347-376 (2008)
13. Rivest, R.L.: The MD5 message digest algorithm. Request for Comments (RFC 1321), Network Working Group (1992)
14. Tsudik, G.: Message authentication with one-way hash functions. ACM Comput. Commun. Rev. 22(5), 29-38 (1992)
15. Wang, L., Ohta, K., Kunihiro, N.: New key-recovery attacks on HMAC/NMACMD4 and NMAC-MD5. In: Smart, N.P. (ed.) EUROCRYPT 2008. LNCS, vol.4965, pp. 237-253. Springer, Heidelberg (2008) (Pubitemid 351762833)
16. Wang, X., Lai, X., Feng, D., Chen, H., Yu, X.: Cryptanalysis of the hash functions MD4 and RIPEMD. In: Cramer, R. (ed.) EUROCRYPT 2005. LNCS, vol.3494, pp. 1-18. Springer, Heidelberg (2005) (Pubitemid 41313943)
17. Wang, X., Yu, H.: How to break MD5 and other hash functions. In: Cramer, R. (ed.) EUROCRYPT 2005. LNCS, vol.3494, pp. 19-35. Springer, Heidelberg (2005) (Pubitemid 41313944)
18. Wang, X., Yu, H., Yin, Y.L.: Efficient collision search attacks on SHA-0. In: Shoup, V. (ed.) CRYPTO 2005. LNCS, vol.3621, pp. 1-16. Springer, Heidelberg (2005)
19. Wang, X., Yin, Y.L., Yu, H.: Finding collisions in the full SHA-1. In: Shoup, V. (ed.) CRYPTO 2005. LNCS, vol.3621, pp. 17-36. Springer, Heidelberg (2005) (Pubitemid 43902104)
20. Yuval, G.: How to swindle rabin. Cryptologia 3, 187-190 (1979)