Welcome!
To use the personalized features of this site, please log in or register.
If you have forgotten your username or password, we can help.
My Menu
Saved Items

Cryptanalysis of MD4

Hans Dobbertin1

(1)  German Information Security Agency, P.O. Box 20 03 63, D-53133 Bonn, Germany {dobbertin@skom.rhein.de}, DE
Abstract.    In 1990 Rivest introduced the hash function MD4. Two years later RIPEMD, a European proposal, was designed as a stronger mode of MD4. In 1995 the author found an attack against two of three rounds of RIPEMD. As we show in the present note, the methods developed to attack RIPEMD can be modified and supplemented such that it is possible to break the full MD4, while previously only partial attacks were known. An implementation of our attack allows us to find collisions for MD4 in a few seconds on a PC. An example of a collision is given demonstrating that our attack is of practical relevance.

Key words. Dedicated hash functions, Collisions, MD4, MD5, RIPEMD.

Received 23 October 1995 and revised 31 August 1997

Fulltext Preview (Small, Large)
Image of the first page of the fulltext


Export this article
Export this article as RIS | Text
 
Referenced by
4 newer articles

  1. Sanadhya, Somitra Kumar (2009) A combinatorial analysis of recent attacks on step reduced SHA-2 family. Cryptography and Communications
    [CrossRef]
  2. Sarkar, P. (2005) Masking-Based Domain Extenders for UOWHFs: Bounds and Constructions. IEEE Transactions on Information Theory 51(12)
    [CrossRef]
  3. Knudsen, L. (2002) Construction of secure and fast hash functions using nonbinary error-correcting codes. IEEE Transactions on Information Theory 48(9)
    [CrossRef]
  4. Naor, M. (2000) Certificate revocation and certificate update. IEEE Journal on Selected Areas in Communications 18(4)
    [CrossRef]
Remote Address: 38.107.191.109 • Server: mpweb03
HTTP User Agent: CCBot/1.0 (+http://www.commoncrawl.org/bot.html)