Indifferentiable hash functions in the standard model
Partala, Juha (2021-04-16)
Partala, J. (2021), Indifferentiable hash functions in the standard model. IET Inf. Secur, 15: 309-316. https://doi.org/10.1049/ise2.12025
© 2021 The Authors. IET Information Security published by John Wiley & Sons Ltd on behalf of The Institution of Engineering and Technology. This is an open access article under the terms of the Creative Commons Attribution‐NonCommercial License, which permits use, distribution and reproduction in any medium, provided the original work is properly cited and is not used for commercial purposes.
https://creativecommons.org/licenses/by-nc/4.0/
https://urn.fi/URN:NBN:fi-fe2021062840160
Tiivistelmä
Abstract
Indifferentiability of iterated hash functions is seen as evidence that there are no structural flaws in the iteration structure of the algorithm. However, it is often overlooked that such considerations only hold in the random oracle model and do not give any guarantee in the standard model. In this article, we show the following separation result: there is a hash function that is indifferentiable from a random oracle, but is totally insecure in the standard model. In particular, we show that it does not satisfy collision or multicollision-resistance, second preimage-resistance or preimage-resistance for any family of compression functions. Therefore, at least in theory, hash function indifferentiability does not guarantee the structural integrity of the hash algorithm in the standard model. Results in the random oracle model are not affected.
Kokoelmat
- Avoin saatavuus [37647]
