International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

On the Security of Encryption Modes of MD4, MD5 and HAVAL

Authors:
Jongsung Kim
Alex Biryukov
Bart Preneel
Sangjin Lee
Download:
URL: http://eprint.iacr.org/2005/327
Search ePrint
Search Google
Abstract: MD4 is a cryptographic hash function introduced in 1990 by Rivest. After MD4 was proposed, several hash functions such as MD5, HAVAL, RIPEMD, RIPEMD-160, SHA-1 and SHA-256 were designed based on the MD4 structure. In this paper, we cryptanalyze the compression functions of MD4, MD5 and 4-, 5-pass HAVAL in encryption modes. We exploit the recently proposed related-key rectangle and boomerang techniques to show non-randomness of MD4, MD5 and 4-, 5-pass HAVAL and to distinguish them from a randomly chosen cipher. The attacks are highly practical and have been confirmed by our experiments.
BibTeX
@misc{eprint-2005-12661,
  title={On the Security of Encryption Modes of MD4, MD5 and HAVAL},
  booktitle={IACR Eprint archive},
  keywords={secret-key cryptography / hash functions},
  url={http://eprint.iacr.org/2005/327},
  note={A shorten version of the paper will be published in ICICS 2005. Kim.Jongsung@esat.kuleuven.be 13070 received 16 Sep 2005, last revised 14 Oct 2005},
  author={Jongsung Kim and Alex Biryukov and Bart Preneel and Sangjin Lee},
  year=2005
}