[Resource Topic] 2006/485: Indifferentiability of Single-Block-Length and Rate-1 Compression Functions

Welcome to the resource topic for 2006/485

Title:
Indifferentiability of Single-Block-Length and Rate-1 Compression Functions

Authors: Hidenori Kuwakado, Masakatu Morii

Abstract:

The security notion of indifferentiability was proposed by Maurer, Renner, and Holenstein in 2004. In 2005, Coron, Dodis, Malinaud, and Puniya discussed the indifferentiability of hash functions. They showed that the Merkle-Damgaard construction is not secure in the sense of indifferentiability. In this paper, we analyze the security of single-block-length and rate-1 compression functions in the sense of indifferentiability. We formally show that all single-block-length and rate-1 compression functions, which include the Davies-Meyer compression function, are insecure. Furthermore, we show how to construct a secure single-block-length and rate-1 compression function in the sense of indifferentiability. This does not contradict our result above.

ePrint: https://eprint.iacr.org/2006/485

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .