title: Ð¡ÑÐ°Ð²Ð½Ð¸ÑÐµÐ»ÑÐ½Ð¾Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð°ÑÐ°ÐºÐ¸ ÑÐ´Ð»Ð¸Ð½ÐµÐ½Ð¸ÐµÐ¼ ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ñ Ð½Ð° Ñ ÑÑ-ÑÑÐ½ÐºÑÐ¸Ð¸ ÑÐµÐ¼ÐµÐ¹ÑÑÐ²Ð° sha-2 Ð¸ sha-1
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: A comparative research of the effectiveness of defense methods against length extension attack on SHA-2 family and SHA-1 hash functions
Creators: name: ÐÑÐ±Ð°ÑÐµÐ², ÐÐ»ÐµÐºÑÐ°Ð½Ð´Ñ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2024
Subjects: SHA-1
ÑÐµÐ¼ÐµÐ¹ÑÑÐ²Ð¾ SHA-2
MAC
Ð°ÑÐ°ÐºÐ° ÑÐ´Ð»Ð¸Ð½ÐµÐ½Ð¸ÐµÐ¼ ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ñ
LEA
Ð¼ÐµÑÐ¾Ð´Ñ Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ LEA
family SHA-2
length extension attack
defense methods against LEA

description: ÐÐ°Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¿Ð¾ÑÐ²ÑÑÐµÐ½Ð° Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ñ ÑÑÐ°Ð²Ð½Ð¸ÑÐµÐ»ÑÐ½Ð¾Ð³Ð¾ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð°ÑÐ°ÐºÐ¸ ÑÐ´Ð»Ð¸Ð½ÐµÐ½Ð¸ÐµÐ¼ ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ñ (LEA) Ð½Ð° ÑÑÑ-ÑÑÐ½ÐºÑÐ¸Ð¸ ÑÐµÐ¼ÐµÐ¹ÑÑÐ²Ð° SHA-2 Ð¸ SHA-1, Ð²ÑÐ¿Ð¾Ð»Ð½ÑÑÑÐ¸Ñ ÑÐ¾Ð»Ñ ÑÐ¸ÑÑÑÑÑÐµÐ³Ð¾ ÑÐ´ÑÐ° ÐºÐ¾Ð´Ð° Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ð¹ (MAC). Ð ÑÐ¾Ð´Ðµ Ð²ÑÐ¿Ð¾Ð»Ð½ÐµÐ½Ð¸Ñ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» Ð¿ÑÐ¾Ð²ÐµÐ´ÑÐ½ Ð°Ð½Ð°Ð»Ð¸Ð· ÑÐµÐ¾ÑÐµÑÐ¸ÑÐµÑÐºÐ¾Ð¹ Ð±Ð°Ð·Ñ ÑÐ°ÐºÐ¸Ñ ÐºÑÐ¸Ð¿ÑÐ¾Ð³ÑÐ°ÑÐ¸ÑÐµÑÐºÐ¸Ñ ÑÑÑÑÐºÑÑÑ, ÐºÐ°Ðº ÑÑÑ-Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ñ ÑÐµÐ¼ÐµÐ¹ÑÑÐ²Ð° SHA-2, SHA-1, MAC Ð° ÑÐ°ÐºÐ¶Ðµ Ð°ÑÐ°ÐºÐ° ÑÐ´Ð»Ð¸Ð½ÐµÐ½Ð¸ÐµÐ¼ ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ñ, Ð±ÑÐ»Ð¸ Ð¾Ð¿Ð¸ÑÐ°Ð½Ñ Ð¿ÑÐ¸ÑÐ¸Ð½Ñ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐ¸ Ð¾Ñ Ð´Ð°Ð½Ð½Ð¾Ð¹ Ð°ÑÐ°ÐºÐ¸ Ð¸ ÑÑÐ¾ÑÐ¼ÑÐ»Ð¸ÑÐ¾Ð²Ð°Ð½Ñ Ð¾ÑÐ½Ð¾Ð²Ð½ÑÐµ Ð¿ÑÐ¸Ð½ÑÐ¸Ð¿Ñ Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð½ÐµÑ. ÐÐ° Ð¯Ð Ð¡# Ð±ÑÐ»Ð° ÑÐ¾Ð·Ð´Ð°Ð½Ð° ÐºÑÐ¸Ð¿ÑÐ¾Ð³ÑÐ°ÑÐ¸ÑÐµÑÐºÐ°Ñ Ð±Ð¸Ð±Ð»Ð¸Ð¾ÑÐµÐºÐ°, ÑÐµÐ°Ð»Ð¸Ð·ÑÑÑÐ°Ñ Ð¸ÑÑÐ»ÐµÐ´ÑÐµÐ¼ÑÐµ ÑÑÑ-Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ñ, Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ð½ÑÑ Ð°ÑÐ°ÐºÑ LEA Ð¸ ÑÐ°Ð·Ð»Ð¸ÑÐ½ÑÐµ Ð²Ð°ÑÐ¸Ð°ÑÐ¸Ð¸ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð½ÐµÑ.Â  ÐÐ°Ðº Ð¸ÑÐ¾Ð³, Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¾ ÑÑÐ°Ð²Ð½Ð¸ÑÐµÐ»ÑÐ½Ð¾Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ ÑÐ°ÑÑÐ¼Ð°ÑÑÐ¸Ð²Ð°ÐµÐ¼Ð¾Ð¹ Ð°ÑÐ°ÐºÐ¸, Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ñ Ð¸Ñ ÑÐ¸Ð»ÑÐ½ÑÐµ Ð¸ ÑÐ»Ð°Ð±ÑÐµ ÑÑÐ¾ÑÐ¾Ð½Ñ, ÑÐ´ÐµÐ»Ð°Ð½Ñ Ð²ÑÐ²Ð¾Ð´Ñ Ð¾ ÑÐµÐ»ÐµÑÐ¾Ð¾Ð±ÑÐ°Ð·Ð½Ð¾ÑÑÐ¸ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ ÐºÐ¾Ð½ÐºÑÐµÑÐ½Ð¾Ð³Ð¾ Ð¼ÐµÑÐ¾Ð´Ð° Ð¿ÑÐ¸ Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÑÐ½Ð½ÑÑ Ð²Ð½ÐµÑÐ½Ð¸Ñ ÑÑÐ»Ð¾Ð²Ð¸ÑÑ.
description: This work is devoted to conducting comparative research of the effectiveness of defense methods against length extension attack (LEA) on SHA-2 family and SHA-1 hash functions that act as the encryption core of the message authentication code (MAC). In the process of carrying out the work, an analysis of the theoretical basis of such cryptographic structures as hash algorithms of the SHA-2, SHA-1, MAC family as well as the message lengthening attack was carried out, the causes of vulnerability from this attack were described and the basic principles of protection against it were formulated. A cryptographic library was created on C# that implements the hash algorithms under study, an automated LEA attack and various variations of methods to protect against it.Â  As a result, a comparative study of the effectiveness of the developed methods of protection against the attack in question was conducted, their strengths and weaknesses were identified, conclusions were drawn about the expediency of using a specific method under certain external conditions.