In this article, we analyze the security of the GOST hash function. The GOST hash function, defined in the Russian standard GOST 34.11-94, is an iterated hash function producing a 256-bit hash value. As opposed to most commonly used hash functions such as MD5 and SHA-1, the GOST hash function defines, in addition to the common iterative structure, a checksum computed over all input message blocks. This checksum is then part of the final hash value computation. As a result of our security analysis of the GOST hash function, we present the first collision attack with a complexity of about 2 105 evaluations of the compression function. Furthermore, we are able to significantly improve upon the results of Mendel et al. with respect to preimage and second preimage attacks. Our improved attacks have a complexity of about 2 192 evaluations of the compression function.
Mendel, Pramstaller and Rechberger REF presented a short-cut (second) preimage attack on the 256-bit GOST hash function for a target message of at least 257 message blocks in 2 192 evaluations of the compression function.
Cryptanalysis of the GOST Hash Function
CRYPTO
Computer Science