论文信息 - A Cryptanalysis of IOTA ’ s Curl Hash Function

A Cryptanalysis of IOTA ’ s Curl Hash Function

In this paper, we analyze the security of IOTA’s now-deprecated cryptographic hash function Curl. We independently reproduce and formalize the results of Heilman et al. [7] by demonstrating a secondpreimage attack, a related digest attack, and a constructive full-state collision. We conclude that Curl is not a secure cryptographic hash function.

Garrett Tanzer | Michael Colavita

[1] Silvio Micali,et al. A Digital Signature Scheme Secure Against Adaptive Chosen-Message Attacks , 1988, SIAM J. Comput..

[2] Eli Biham,et al. Differential Cryptanalysis of the Data Encryption Standard , 1993, Springer New York.

[3] Thomas Shrimpton,et al. Cryptographic Hash-Function Basics: Definitions, Implications, and Separations for Preimage Resistance, Second-Preimage Resistance, and Collision Resistance , 2004, FSE.

[4] Xiaoyun Wang,et al. How to Break MD5 and Other Hash Functions , 2005, EUROCRYPT.

[5] Martin Cochran. Notes on the Wang et al. 263 SHA-1 Differential Path , 2007, IACR Cryptol. ePrint Arch..

[6] Guido Bertoni,et al. Duplexing the sponge: single-pass authenticated encryption and other applications , 2011, IACR Cryptol. ePrint Arch..