[Resource Topic] 2009/292: Implementing Wagner's generalized birthday attack against the SHA-3 round-1 candidate FSB

Welcome to the resource topic for 2009/292

Title:
Implementing Wagner’s generalized birthday attack against the SHA-3 round-1 candidate FSB

Authors: Daniel J. Bernstein, Tanja Lange, Ruben Niederhagen, Christiane Peters, Peter Schwabe

Abstract:

This paper applies generalized birthday attacks to the FSB compression function, and shows how to adapt the attacks so that they run in far less memory. In particular, this paper presents details of a parallel implementation attacking FSB48 , a scaled-down version of FSB proposed by the FSB submitters. The implementation runs on a cluster of 8 PCs, each with only 8GB of RAM and 700GB of disk. This situation is very interesting for estimating the security of systems against distributed attacks using contributed off-the-shelf PCs.

ePrint: https://eprint.iacr.org/2009/292

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .