The MD2 hash function is not one-way

被引：0

作者：

Muller, F ^{[1
]}

机构：

[1] DCSSI Crypto Lab 51, F-75700 Paris 07, SP, France

来源：

ADVANCES IN CRYPTOLOGY - ASIACRYPT 2004, PROCEEDINGS | 2004年 / 3329卷

关键词：

D O I：

暂无

中图分类号：

TP31 [计算机软件];

学科分类号：

081202 ; 0835 ;

摘要：

MD2 is an early hash function developed by Ron Rivest for RSA Security, that produces message digests of 128 bits. In this paper, 128 we show that MD2 does not reach the ideal security level of 2(128). We describe preimage attacks against the underlying compression function, the best of which has complexity of 2(73). As a result, the full MD2 hash 104 can be attacked in preimage with complexity of 2(104).

引用

页码：214 / 229

页数：16