Slide Attacks on a Class of Hash Functions

摘要

This paper studies the application of slide attacks to hash functions. Slide attacks have mostly been used for block cipher crypt-analysis. But, as shown in the current paper, they also form a potential threat for hash functions, namely for sponge-function like structures. As it turns out, certain constructions for hash-function-based MACs can be vulnerable to forgery and even to key recovery attacks. In other cases, we can at least distinguish a given hash function from a random oracle. To illustrate our results, we describe attacks against the GRINDAHL-256 and GRINDAHL-512 hash functions. To the best of our knowledge, this is the first cryptanalytic result on GRINDAHL - 512. Furthermore, we point out a slide-based distinguisher attack on a slightly modified version of RADIOGATUN. We finally discuss simple countermeasures as a defense against slide attacks.