Sciweavers

Free Online Productivity Tools i2Speak i2Symbol i2OCR iTex2Img iWeb2Print iWeb2Shot i2Type iPdf2Split iPdf2Merge i2Bopomofo i2Arabic i2Style i2Image i2PDF iLatex2Rtf Sci2ools

16

CRYPTO
2011
Springer

favoriteEmaildiscussreport

237views Cryptology» more CRYPTO 2011»

The Collision Security of Tandem-DM in the Ideal Cipher Model

12 years 4 months ago

The Collision Security of Tandem-DM in the Ideal Cipher Model

Download eprint.iacr.org

We prove that Tandem-DM, one of the two “classical” schemes for turning a blockcipher of 2n-bit key into a double block length hash function, has birthday-type collision resistance in the ideal cipher model. A collision resistance analysis for Tandem-DM achieving a similar birthday-type bound was already proposed by Fleischmann, Gorski and Lucks at FSE 2009 [3]. As we detail, however, the latter analysis is wrong, thus leaving the collision resistance of Tandem-DM as an open problem until now.

Jooyoung Lee, Martijn Stam, John P. Steinberger

Real-time Traffic

CRYPTO 2011 | Cryptology | Hash Function | Lucks | Resistance Analysis |

claim paper

Related Content

» The Security of AbreastDM in the Ideal Cipher Model

» The Random Oracle Model and the Ideal Cipher Model Are Equivalent

» A CollisionResistant Rate1 DoubleBlockLength Hash Function

» The IdealCipher Model Revisited An Uninstantiable BlockcipherBased Hash Function

» On CipherDependent RelatedKey Attacks in the IdealCipher Model

» Compression Function Design Principles Supporting Variable Output Lengths from a Single Sm...

» A Domain Extender for the Ideal Cipher

» On HighRate Cryptographic Compression Functions

» Cryptanalysis of a Message Authentication Code due to Cary and Venkatesan

Post Info
More Details (n/a)

Added	18 Dec 2011
Updated	18 Dec 2011
Type	Journal
Year	2011
Where	CRYPTO
Authors	Jooyoung Lee, Martijn Stam, John P. Steinberger

Comments (0)