Abstract. In this paper we present an improvement of the di erential attack on hash functions based on block ciphers. By using the speci c properties of the collision attack on hash functions, we can greatly reduce the work factor to nd a pair that follows the characteristic. We propose a new family of di erential characteristics that is especially useful in combination with our improvement. Attacks on a hash function based on DES variants reduced to 12, 13 or 15 rounds become faster than brute force collision attacks.
Rijmen and Preneel REF describe collision attacks on 15 out of 16 rounds on hash functions using DES.
Improved Characteristics for Differential Cryptanalysis of Hash Functions Based on Block Ciphers
FSE
Computer Science Mathematics