Bad directions in cryptographic hash functions

Daniel J. Bernstein; Andreas Hülsing; Tanja Lange; Ruben Niederhagen

doi:10.1007/978-3-319-19962-7_28

Bad directions in cryptographic hash functions

Daniel J. Bernstein, Andreas Hülsing, Tanja Lange, Ruben Niederhagen

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

2 Citations (Scopus)

Abstract

A 25-gigabyte “point obfuscation” challenge “using security parameter 60” was announced at the Crypto 2014 rump session; “point obfuscation” is another name for password hashing. This paper shows that the particular matrix-multiplication hash function used in the challenge is much less secure than previous password-hashing functions are believed to be. This paper’s attack algorithm broke the challenge in just 19 minutes using a cluster of 21 PCs.

Original language	English
Title of host publication	Information Security and Privacy
Subtitle of host publication	20th Australasian Conference, ACISP 2015, Brisbane, QLD, Australia, June 29 -- July 1, 2015, Proceedings
Editors	E. Foo, D. Stebila
Place of Publication	Berlin
Publisher	Springer
Pages	488-508
Number of pages	21
ISBN (Print)	9783319199610
DOIs	https://doi.org/10.1007/978-3-319-19962-7_28
Publication status	Published - 2015
Event	20th Australasian Conference on Information Security and Privacy (ACISP 2015), June 29-July 1, 2015, Brisbane, Australia - Queensland University of Technology, Brisbane, Australia Duration: 29 Jun 2015 → 1 Jul 2015 http://acisp2015.qut.edu.au/

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	9144
ISSN (Print)	03029743
ISSN (Electronic)	16113349

Conference

Conference	20th Australasian Conference on Information Security and Privacy (ACISP 2015), June 29-July 1, 2015, Brisbane, Australia
Abbreviated title	ACISP 2015
Country/Territory	Australia
City	Brisbane
Period	29/06/15 → 1/07/15
Internet address	http://acisp2015.qut.edu.au/

Keywords

Hash functions
Matrix multiplication
Meet-in-many-middles attacks
Meet-in-the-middle attacks
Password hashing
Point obfuscation
Symmetric cryptography

Access to Document

10.1007/978-3-319-19962-7_28

https://eprint.iacr.org/2015/151

Cite this

Bernstein, D. J., Hülsing, A., Lange, T., & Niederhagen, R. (2015). Bad directions in cryptographic hash functions. In E. Foo, & D. Stebila (Eds.), Information Security and Privacy : 20th Australasian Conference, ACISP 2015, Brisbane, QLD, Australia, June 29 -- July 1, 2015, Proceedings (pp. 488-508). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9144). Springer. https://doi.org/10.1007/978-3-319-19962-7_28

Bernstein, Daniel J. ; Hülsing, Andreas ; Lange, Tanja et al. / Bad directions in cryptographic hash functions. Information Security and Privacy : 20th Australasian Conference, ACISP 2015, Brisbane, QLD, Australia, June 29 -- July 1, 2015, Proceedings. editor / E. Foo ; D. Stebila. Berlin : Springer, 2015. pp. 488-508 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{cb103d45c4c341c3bddfaac9c598dfda,

title = "Bad directions in cryptographic hash functions",

abstract = "A 25-gigabyte “point obfuscation” challenge “using security parameter 60” was announced at the Crypto 2014 rump session; “point obfuscation” is another name for password hashing. This paper shows that the particular matrix-multiplication hash function used in the challenge is much less secure than previous password-hashing functions are believed to be. This paper{\textquoteright}s attack algorithm broke the challenge in just 19 minutes using a cluster of 21 PCs.",

keywords = "Hash functions, Matrix multiplication, Meet-in-many-middles attacks, Meet-in-the-middle attacks, Password hashing, Point obfuscation, Symmetric cryptography",

author = "Bernstein, {Daniel J.} and Andreas H{\"u}lsing and Tanja Lange and Ruben Niederhagen",

year = "2015",

doi = "10.1007/978-3-319-19962-7_28",

language = "English",

isbn = "9783319199610",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "488--508",

editor = "E. Foo and D. Stebila",

booktitle = "Information Security and Privacy",

address = "Germany",

note = "20th Australasian Conference on Information Security and Privacy (ACISP 2015), June 29-July 1, 2015, Brisbane, Australia, ACISP 2015 ; Conference date: 29-06-2015 Through 01-07-2015",

url = "http://acisp2015.qut.edu.au/",

}

Bernstein, DJ, Hülsing, A , Lange, T & Niederhagen, R 2015, Bad directions in cryptographic hash functions. in E Foo & D Stebila (eds), Information Security and Privacy : 20th Australasian Conference, ACISP 2015, Brisbane, QLD, Australia, June 29 -- July 1, 2015, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 9144, Springer, Berlin, pp. 488-508, 20th Australasian Conference on Information Security and Privacy (ACISP 2015), June 29-July 1, 2015, Brisbane, Australia, Brisbane, Australia, 29/06/15. https://doi.org/10.1007/978-3-319-19962-7_28

Bad directions in cryptographic hash functions. / Bernstein, Daniel J.; Hülsing, Andreas ; Lange, Tanja et al.
Information Security and Privacy : 20th Australasian Conference, ACISP 2015, Brisbane, QLD, Australia, June 29 -- July 1, 2015, Proceedings. ed. / E. Foo; D. Stebila. Berlin: Springer, 2015. p. 488-508 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9144).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Bad directions in cryptographic hash functions

AU - Bernstein, Daniel J.

AU - Hülsing, Andreas

AU - Lange, Tanja

AU - Niederhagen, Ruben

PY - 2015

Y1 - 2015

N2 - A 25-gigabyte “point obfuscation” challenge “using security parameter 60” was announced at the Crypto 2014 rump session; “point obfuscation” is another name for password hashing. This paper shows that the particular matrix-multiplication hash function used in the challenge is much less secure than previous password-hashing functions are believed to be. This paper’s attack algorithm broke the challenge in just 19 minutes using a cluster of 21 PCs.

AB - A 25-gigabyte “point obfuscation” challenge “using security parameter 60” was announced at the Crypto 2014 rump session; “point obfuscation” is another name for password hashing. This paper shows that the particular matrix-multiplication hash function used in the challenge is much less secure than previous password-hashing functions are believed to be. This paper’s attack algorithm broke the challenge in just 19 minutes using a cluster of 21 PCs.

KW - Hash functions

KW - Matrix multiplication

KW - Meet-in-many-middles attacks

KW - Meet-in-the-middle attacks

KW - Password hashing

KW - Point obfuscation

KW - Symmetric cryptography

UR - http://www.scopus.com/inward/record.url?scp=84947218666&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-19962-7_28

DO - 10.1007/978-3-319-19962-7_28

M3 - Conference contribution

AN - SCOPUS:84947218666

SN - 9783319199610

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 488

EP - 508

BT - Information Security and Privacy

A2 - Foo, E.

A2 - Stebila, D.

PB - Springer

CY - Berlin

T2 - 20th Australasian Conference on Information Security and Privacy (ACISP 2015), June 29-July 1, 2015, Brisbane, Australia

Y2 - 29 June 2015 through 1 July 2015

ER -

Bernstein DJ, Hülsing A , Lange T, Niederhagen R. Bad directions in cryptographic hash functions. In Foo E, Stebila D, editors, Information Security and Privacy : 20th Australasian Conference, ACISP 2015, Brisbane, QLD, Australia, June 29 -- July 1, 2015, Proceedings. Berlin: Springer. 2015. p. 488-508. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-319-19962-7_28

Bad directions in cryptographic hash functions

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this