[Resource Topic] 2021/732: Preimage Attacks on 4-round Keccak by Solving Multivariate Quadratic Systems

Welcome to the resource topic for 2021/732

Title:
Preimage Attacks on 4-round Keccak by Solving Multivariate Quadratic Systems

Authors: Congming Wei, Chenhao Wu, Ximing Fu, Xiaoyang Dong, Kai He, Jue Hong, Xiaoyun Wang

Abstract:

In this paper, we present preimage attacks on 4-round Keccak-224/256 as well as 4-round Keccak[r = 640,c = 160,l = 80] in the preimage challenges. We revisit the Crossbred algorithm for solving the Boolean multivariate quadratic (MQ) system, propose a new view for the case D = 2 and elaborate the computational complexity. The result shows that the Crossbred algorithm outperforms brute force theoretically and practically with feasible memory costs. In our attacks, we construct Boolean MQ systems in order to make full use of variables. With the help of solving MQ systems, we successfully improve preimage attacks on Keccak-224/256 reduced to 4 rounds. Moreover, we implement the preimage attack on 4-round Keccak[r = 640,c = 160,l = 80], an instance in the Keccak preimage challenges, and find 78-bit matched \textit{near preimages}. Due to the fundamental rule of solving MQ systems, the complexity elaboration of Crossbred algorithm is of independent interest.

ePrint: https://eprint.iacr.org/2021/732

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .