It has been proposed to use double-DES as a fixed-length collision- resistant hash function within the Merkle-Damgård transform, in the following way. Define the hash function h : {0,1}112 → {0,1}64 as h(x1||X2) = DES,,(DES-,(064)) where |¤1| = |x2| = 56. (a) Write down an actual collision in this fixed-length hash function. (b) In how much time is it possible to find a preimage for the hash function. That is, given some y € {0,1}64 show how to find a pair (x1, x2) such that h(x1||x2) = y. Make your attack as quick as possible. Does your attack make it possible to find a preimage that "makes sense" (say, one that contains an English word)? (c) What happens when h as above is used in the Merkle-Damgård transform? Find the most effective attack that you can think of.

Linear Algebra: A Modern Introduction
4th Edition
ISBN:9781285463247
Author:David Poole
Publisher:David Poole
Chapter4: Eigenvalues And Eigenvectors
Section4.6: Applications And The Perron-frobenius Theorem
Problem 17EQ
icon
Related questions
Question
5.9 ILl has been proposed to use double-DES as a ſixed-length collision-
resistant hash function within the Merkle-Damgård transform, in the
following way. Define the hash function h : {0,1}112 .
h(x1||r2) = DES=, (DES,(064)) where |¤1| = |x2| = 56.
{0, 1}64 as
%3D
(a) Write down an actual collision in this fixed-length hash function.
(b) In how much time is it possible to find a preimage for the hash
function. That is, given some y e {0,1}64 show how to find a
pair (x1, x2) such that h(x1||x2) = y. Make your attack as quick
as possible. Does your attack make it possible to find a preimage
that "makes sense" (say, one that contains an English word)?
(c) What happens when h as above is used in the Merkle-Damgård
transform? Find the most effective attack that you can think of.
Transcribed Image Text:5.9 ILl has been proposed to use double-DES as a ſixed-length collision- resistant hash function within the Merkle-Damgård transform, in the following way. Define the hash function h : {0,1}112 . h(x1||r2) = DES=, (DES,(064)) where |¤1| = |x2| = 56. {0, 1}64 as %3D (a) Write down an actual collision in this fixed-length hash function. (b) In how much time is it possible to find a preimage for the hash function. That is, given some y e {0,1}64 show how to find a pair (x1, x2) such that h(x1||x2) = y. Make your attack as quick as possible. Does your attack make it possible to find a preimage that "makes sense" (say, one that contains an English word)? (c) What happens when h as above is used in the Merkle-Damgård transform? Find the most effective attack that you can think of.
Expert Solution
steps

Step by step

Solved in 3 steps with 1 images

Blurred answer
Similar questions
  • SEE MORE QUESTIONS
Recommended textbooks for you
Linear Algebra: A Modern Introduction
Linear Algebra: A Modern Introduction
Algebra
ISBN:
9781285463247
Author:
David Poole
Publisher:
Cengage Learning