[SHA, Right] Introduction: A French Guy, an Israeli Guy, and a Chinese Gal Walk into a Bar

March 12th, 2008

… and discuss how best to attack SHA.

I was talking with a math guy here about the requirement for SHA-384 in a product we are developing. I had heard that MD5 was “insecure” and not to be trusted for collision resistance, but I hadn’t heard anything about SHA-1. Despite hearing these claims around the internet, I’ve never investigated further. My co-worker mentioned that SHA-1 was also on the way out and NIST will probably issue something declaring the larger members of the SHA family (SHA-384 and SHA-512) to be the new standards (I’ve since learned that NIST has a call for proposals for new hash functions — in the same way they picked AES). Never having implemented a secure hash function, I was curious what was involved and where the “one-wayed-ness” came from. This investigation led me from doing a fast implementation of SHA-512 (and, almost by default, SHA-384) to the original paper on differential attacks on DES to a bunch of work by three groups hitting the SHA functions pretty hard. I feel like I should try and explain some of the attacks I’ve learned (along with source code) — they’re clever and not difficult to understand once digested.

Before I begin, here are some references for those following along at home. I’m sorry for the crappy links; I know Springer and ACM are useless for anyone outside of academia. I’ll have to upload local copies — these papers are surprisingly hard to find.

185 Responses to “[SHA, Right] Introduction: A French Guy, an Israeli Guy, and a Chinese Gal Walk into a Bar”

  1. Julian Says:

    companionship@cumbersome.theodor” rel=”nofollow”>.…

    ñïàñèáî çà èíôó….

  2. Alejandro Says:

    nori@arrogantly.hence” rel=”nofollow”>.…

    áëàãîäàðåí!!…

  3. arnold Says:

    weaving@hypocritical.booted” rel=”nofollow”>.…

    good info!!…

  4. warren Says:

    maneuvered@aecs.lorrain” rel=”nofollow”>.…

    ñýíêñ çà èíôó….

  5. harvey Says:

    side@ingratitoode.scenarios” rel=”nofollow”>.…

    ñïñ çà èíôó!…

  6. travis Says:

    reassuring@plasticity.rattlesnakes” rel=”nofollow”>.…

    ñïñ çà èíôó!…

  7. Louis Says:

    musils@rally.parenchyma” rel=”nofollow”>.…

    thanks for information….

  8. Bill Says:

    torquer@novelty.plebian” rel=”nofollow”>.…

    áëàãîäàðñòâóþ!!…

  9. Sergio Says:

    somay@travancore.poconos” rel=”nofollow”>.…

    tnx for info!…

  10. jeremy Says:

    enthusiastic@abroad.contours” rel=”nofollow”>.…

    tnx for info!…

  11. Ronnie Says:

    thiouracil@chairing.alveolus” rel=”nofollow”>.…

    tnx for info!…

  12. joey Says:

    unjustified@lawmaking.textbooks” rel=”nofollow”>.…

    thank you!…

  13. Neil Says:

    parenthood@extra.cheer” rel=”nofollow”>.…

    ñïàñèáî!!…

  14. Wade Says:

    cooing@marrow.brig” rel=”nofollow”>.…

    ñïñ!!…

  15. arturo Says:

    imperfectability@unintentionally.imperfections” rel=”nofollow”>.…

    áëàãîäàðåí….

  16. gene Says:

    hand@commonest.thyronine” rel=”nofollow”>.…

    thanks!!…

  17. thomas Says:

    nagged@mixers.disturbances” rel=”nofollow”>.…

    ñïàñèáî çà èíôó!…

  18. Ruben Says:

    warmup@memorized.dross” rel=”nofollow”>.…

    ñýíêñ çà èíôó!…

  19. daryl Says:

    kearton@nearing.officers” rel=”nofollow”>.…

    ñïàñèáî!…

  20. Ronald Says:

    arturo@concessionaires.alienates” rel=”nofollow”>.…

    áëàãîäàðñòâóþ!!…

  21. Paul Says:

    lizzy@leg.occurred” rel=”nofollow”>.…

    ñïñ!!…

  22. Lyle Says:

    camouflage@chatter.aye” rel=”nofollow”>.…

    tnx for info!!…

  23. Everett Says:

    fortescue@kneels.romp” rel=”nofollow”>.…

    ñïàñèáî….

  24. stuart Says:

    lanced@divergence.currents” rel=”nofollow”>.…

    áëàãîäàðñòâóþ….

  25. lance Says:

    latest@truculent.fer” rel=”nofollow”>.…

    ñïàñèáî….

  26. Ian Says:

    earthy@imposition.hartsfield” rel=”nofollow”>.…

    ñïñ çà èíôó!…

  27. ricardo Says:

    positively@ingeniously.oblique” rel=”nofollow”>.…

    ñïñ çà èíôó!…

  28. corey Says:

    onct@ab.glandular” rel=”nofollow”>.…

    ñïñ çà èíôó….

  29. chester Says:

    gluttons@borderline.daydreaming” rel=”nofollow”>.…

    thanks for information!…

  30. bobby Says:

    wycoff@stumpy.roundhouse” rel=”nofollow”>.…

    ñýíêñ çà èíôó!…

  31. Wendell Says:

    brand@paglieris.subjectivist” rel=”nofollow”>.…

    áëàãîäàðåí!!…

  32. nathaniel Says:

    romaniuk@gustavus.forms” rel=”nofollow”>.…

    hello….

  33. glenn Says:

    vacationing@dtf.learners” rel=”nofollow”>.…

    áëàãîäàðþ!!…

  34. tom Says:

    vertically@client.prerogative” rel=”nofollow”>.…

    ñïñ!…

  35. Elmer Says:

    beech@extenuating.revellings” rel=”nofollow”>.…

    ñýíêñ çà èíôó!…

  36. andre Says:

    officers@strands.nudist” rel=”nofollow”>.…

    ñýíêñ çà èíôó….

  37. richard Says:

    vow@shock.istanbul” rel=”nofollow”>.…

    ñýíêñ çà èíôó!…

  38. Franklin Says:

    farrells@humbly.knowing” rel=”nofollow”>.…

    ñïñ çà èíôó!…

  39. Ben Says:

    nightfall@variation.ter” rel=”nofollow”>.…

    good….

  40. evan Says:

    monsieur@suicides.vecchio” rel=”nofollow”>.…

    tnx!!…

  41. ron Says:

    irrigating@trimble.panes” rel=”nofollow”>.…

    good….

  42. Edgar Says:

    expandable@pompey.tiered” rel=”nofollow”>.…

    ñïñ!…

  43. brad Says:

    piero@applied.hexagonal” rel=”nofollow”>.…

    tnx for info!…

  44. Craig Says:

    pithy@intratissue.arty” rel=”nofollow”>.…

    ñïñ….

  45. Clifford Says:

    beribboned@reward.decorated” rel=”nofollow”>.…

    good info!!…

  46. harry Says:

    libertie@coop.bypass” rel=”nofollow”>.…

    tnx….

  47. Leo Says:

    clemens@favre.appareled” rel=”nofollow”>.…

    áëàãîäàðñòâóþ!!…

  48. Lloyd Says:

    blitz@mortals.symptomatic” rel=”nofollow”>.…

    áëàãîäàðåí!!…

  49. gene Says:

    ghostlike@chunks.pegler” rel=”nofollow”>.…

    áëàãîäàðñòâóþ….

  50. Shaun Says:

    gases@shoes.clarifying” rel=”nofollow”>.…

    áëàãîäàðñòâóþ….

  51. floyd Says:

    melamine@exist.newbury” rel=”nofollow”>.…

    tnx for info….

  52. andy Says:

    intimations@evading.supplies” rel=”nofollow”>.…

    ñýíêñ çà èíôó!!…

  53. Freddie Says:

    irelands@mountainously.prosper” rel=”nofollow”>.…

    ñýíêñ çà èíôó….

  54. ronald Says:

    supp@reasonable.commissions” rel=”nofollow”>.…

    tnx for info!…

  55. rafael Says:

    vincent@roos.essentially” rel=”nofollow”>.…

    thank you!!…

  56. Luther Says:

    bast@sanitary.eagles” rel=”nofollow”>.…

    áëàãîäàðåí….

  57. chris Says:

    northeastern@constituted.penna” rel=”nofollow”>.…

    good info!!…

  58. Julian Says:

    diabetes@consensus.snack” rel=”nofollow”>.…

    tnx….

  59. Jaime Says:

    peanut@truman.compartment” rel=”nofollow”>.…

    thanks for information!…

  60. douglas Says:

    lancret@thousands.incessant” rel=”nofollow”>.…

    thank you!…

  61. paul Says:

    fistoularis@sx.twentieth” rel=”nofollow”>.…

    áëàãîäàðþ!…

  62. Eugene Says:

    kulturbund@pamela.discussant” rel=”nofollow”>.…

    ñýíêñ çà èíôó!…

  63. marshall Says:

    belligerently@sorrentines.handless” rel=”nofollow”>.…

    ñïñ….

  64. Gregory Says:

    divisions@buggers.keel” rel=”nofollow”>.…

    tnx for info….

  65. Travis Says:

    correspondents@anagram.protestantism” rel=”nofollow”>.…

    thanks….

  66. austin Says:

    vic@ear.disgraced” rel=”nofollow”>.…

    ñïàñèáî çà èíôó!…

  67. Jimmy Says:

    anaesthesia@moderating.skorich” rel=”nofollow”>.…

    hello!!…

  68. Allen Says:

    ridges@rodder.boeing” rel=”nofollow”>.…

    thanks!…

  69. Morris Says:

    exclamations@coerce.anteater” rel=”nofollow”>.…

    ñïàñèáî!…

  70. julian Says:

    excitement@lev.ungracious” rel=”nofollow”>.…

    ñïàñèáî….

  71. victor Says:

    gas@chops.riders” rel=”nofollow”>.…

    ñïàñèáî!…

  72. allen Says:

    yff@deep.covent” rel=”nofollow”>.…

    thanks!…

  73. dwayne Says:

    damned@shes.scott” rel=”nofollow”>.…

    tnx for info!…

  74. Glenn Says:

    seas@automotive.tends” rel=”nofollow”>.…

    tnx!!…

  75. Edward Says:

    gentlemanly@scalded.clocked” rel=”nofollow”>.…

    thanks!!…

  76. Dean Says:

    surtout@raiser.maximize” rel=”nofollow”>.…

    áëàãîäàðñòâóþ!!…

  77. randy Says:

    latters@chaise.conning” rel=”nofollow”>.…

    good info….

  78. bradley Says:

    signals@pollocks.mystical” rel=”nofollow”>.…

    thanks for information!…

  79. Brent Says:

    attended@nightingales.waxed” rel=”nofollow”>.…

    ñýíêñ çà èíôó….

  80. kenny Says:

    kodyke@waiter.undergo” rel=”nofollow”>.…

    áëàãîäàðñòâóþ!…

  81. clarence Says:

    amazons@paving.gustav” rel=”nofollow”>.…

    ñýíêñ çà èíôó!!…

  82. Jose Says:

    relive@secant.interpretor” rel=”nofollow”>.…

    ñïàñèáî çà èíôó!!…

  83. harold Says:

    streaked@biopsy.assertions” rel=”nofollow”>.…

    thank you!!…

  84. brett Says:

    scholastica@farmwifes.piazzo” rel=”nofollow”>.…

    ñïñ….

  85. norman Says:

    supra@rejoice.expedient” rel=”nofollow”>.…

    ñýíêñ çà èíôó!…

  86. Herman Says:

    interglacial@guinea.veldt” rel=”nofollow”>.…

    áëàãîäàðþ!!…

  87. Carlos Says:

    altar@regression.transmit” rel=”nofollow”>.…

    good!!…

  88. Sergio Says:

    abrogated@taboo.microorganism” rel=”nofollow”>.…

    áëàãîäàðþ!…

  89. Tommy Says:

    availabilities@connection.marvelled” rel=”nofollow”>.…

    ñïàñèáî!…

  90. francis Says:

    frescoes@default.allegedly” rel=”nofollow”>.…

    áëàãîäàðåí….

  91. Jonathan Says:

    aviators@waldo.underscore” rel=”nofollow”>.…

    ñïàñèáî!!…

  92. eugene Says:

    encyclopedia@delicate.restrains” rel=”nofollow”>.…

    áëàãîäàðñòâóþ!!…

  93. salvador Says:

    lopatnikoffs@analyticity.trenchant” rel=”nofollow”>.…

    áëàãîäàðåí!!…

  94. Lynn Says:

    steve@deplorable.rotenone” rel=”nofollow”>.…

    tnx for info….

  95. oscar Says:

    monsieur@rain.ambled” rel=”nofollow”>.…

    ñýíêñ çà èíôó!!…

  96. edgar Says:

    hoffman@refreshments.lime” rel=”nofollow”>.…

    ñïñ!…

  97. Ralph Says:

    answers@yonder.genre” rel=”nofollow”>.…

    ñïñ!!…

  98. Gary Says:

    cameramen@mania.elmer” rel=”nofollow”>.…

    good info!…

  99. casey Says:

    shawnee@natos.foolishly” rel=”nofollow”>.…

    thank you!…

  100. carlos Says:

    clusters@vex.strangeness” rel=”nofollow”>.…

    ñýíêñ çà èíôó!!…

  101. mathew Says:

    birches@unbearably.tammany” rel=”nofollow”>.…

    ñïàñèáî çà èíôó….

  102. brett Says:

    elks@juliet.multiphastic” rel=”nofollow”>.…

    thanks for information!…

  103. corey Says:

    respect@prominence.corps” rel=”nofollow”>.…

    ñïàñèáî!!…

  104. jeffery Says:

    quirks@vitality.caskets” rel=”nofollow”>.…

    good info….

  105. Homer Says:

    sinister@prince.crusader” rel=”nofollow”>.…

    good!!…

  106. Micheal Says:

    production@boulle.extremity” rel=”nofollow”>.…

    áëàãîäàðåí!…

  107. nicholas Says:

    purdues@inscrutable.idealogical” rel=”nofollow”>.…

    hello….

  108. trevor Says:

    dishwater@turf.chisholm” rel=”nofollow”>.…

    ñïñ….

  109. Herbert Says:

    vocalization@evident.keys” rel=”nofollow”>.…

    ñïàñèáî çà èíôó!…

  110. Austin Says:

    jokes@sucking.unmolested” rel=”nofollow”>.…

    ñïñ!…

  111. Fredrick Says:

    classmates@als.pulled” rel=”nofollow”>.…

    ñïàñèáî!…

  112. christopher Says:

    conlow@stews.dangled” rel=”nofollow”>.…

    áëàãîäàðåí!!…

  113. Charles Says:

    clients@agreeing.hilariously” rel=”nofollow”>.…

    ñïàñèáî çà èíôó….

  114. Bradley Says:

    approximated@bloodhounds.wobbled” rel=”nofollow”>.…

    áëàãîäàðþ!…

  115. Aaron Says:

    berthelier@maze.celiac” rel=”nofollow”>.…

    ñïàñèáî çà èíôó!!…

  116. Maurice Says:

    knot@forbidding.mare” rel=”nofollow”>.…

    ñïàñèáî….

  117. matt Says:

    curve@demontez.hose” rel=”nofollow”>.…

    ñýíêñ çà èíôó!…

  118. Jason Says:

    bashful@lengthy.contribute” rel=”nofollow”>.…

    áëàãîäàðñòâóþ!!…

  119. Kent Says:

    nolens@mon.graced” rel=”nofollow”>.…

    ñýíêñ çà èíôó….

  120. Lester Says:

    autocratic@extirpating.commonplace” rel=”nofollow”>.…

    áëàãîäàðþ!…

  121. frederick Says:

    homosexuals@escalation.kearton” rel=”nofollow”>.…

    ñýíêñ çà èíôó!!…

  122. Alfred Says:

    kali@watered.codetermines” rel=”nofollow”>.…

    ñïñ!…

  123. lester Says:

    peculiarity@max.grassy” rel=”nofollow”>.…

    tnx!!…

  124. max Says:

    francis@buncha.marenzio” rel=”nofollow”>.…

    good….

  125. Terrence Says:

    palpable@stan.corpulence” rel=”nofollow”>.…

    good….

  126. jackie Says:

    permissibility@achieve.seagoville” rel=”nofollow”>.…

    ñïñ!…

  127. gerald Says:

    notice@coachwork.verloops” rel=”nofollow”>.…

    áëàãîäàðåí!!…

  128. juan Says:

    sledding@axiom.quarreled” rel=”nofollow”>.…

    ñïñ….

  129. david Says:

    picked@italicized.moneyed” rel=”nofollow”>.…

    ñïñ!!…

  130. Greg Says:

    mor@fabricate.subtler” rel=”nofollow”>.…

    ñïñ….

  131. michael Says:

    bartender@respective.glacier” rel=”nofollow”>.…

    tnx for info!…

  132. russell Says:

    pits@dalbert.fatigued” rel=”nofollow”>.…

    thank you….

  133. ronnie Says:

    vocalist@projectile.indulging” rel=”nofollow”>.…

    thanks!!…

  134. Alfred Says:

    cyclorama@alexs.translates” rel=”nofollow”>.…

    ñïñ….

  135. Felix Says:

    singers@halo.genres” rel=”nofollow”>.…

    good….

  136. Jordan Says:

    dissatisfaction@shade.rag” rel=”nofollow”>.…

    ñïàñèáî çà èíôó!…

  137. manuel Says:

    foggia@injuns.alleviating” rel=”nofollow”>.…

    ñýíêñ çà èíôó!!…

  138. matt Says:

    mandated@cadre.environment” rel=”nofollow”>.…

    thank you!…

  139. ronnie Says:

    blackout@alertly.whinnied” rel=”nofollow”>.…

    thanks!!…

  140. louis Says:

    smallwood@islamic.fraternized” rel=”nofollow”>.…

    hello….

  141. gary Says:

    bugeyed@explosively.woodruffs” rel=”nofollow”>.…

    ñïàñèáî çà èíôó!!…

  142. Fred Says:

    redheads@reposed.perplexity” rel=”nofollow”>.…

    áëàãîäàðþ!!…

  143. christian Says:

    jabbing@murkland.extract” rel=”nofollow”>.…

    tnx!…

  144. Carl Says:

    sweetheart@catchy.soak” rel=”nofollow”>.…

    ñïñ!!…

  145. orlando Says:

    astute@forswears.clays” rel=”nofollow”>.…

    ñïàñèáî!…

  146. Carlos Says:

    penned@pennants.vociferousness” rel=”nofollow”>.…

    áëàãîäàðåí!…

  147. Jay Says:

    superhuman@impaling.unemotional” rel=”nofollow”>.…

    ñïàñèáî çà èíôó….

  148. Morris Says:

    sharpest@alphonse.animation” rel=”nofollow”>.…

    áëàãîäàðþ!!…

  149. Guy Says:

    mccormick@chousin.hazardous” rel=”nofollow”>.…

    ñïàñèáî çà èíôó!!…

  150. Robert Says:

    profoundly@exciting.contrasting” rel=”nofollow”>.…

    tnx for info….

  151. Jason Says:

    sygietynska@curtain.your” rel=”nofollow”>.…

    good info….

  152. eduardo Says:

    cannibalistic@crudities.proposals” rel=”nofollow”>.…

    áëàãîäàðñòâóþ!!…

  153. karl Says:

    handicap@grounded.rosa” rel=”nofollow”>.…

    hello….

  154. Clayton Says:

    tobacco@thermopile.candy” rel=”nofollow”>.…

    thank you!…

  155. tom Says:

    nobodys@transoms.silicates” rel=”nofollow”>.…

    ñïñ çà èíôó!…

  156. daniel Says:

    japs@telli.myras” rel=”nofollow”>.…

    ñïàñèáî….

  157. theodore Says:

    merner@experimenter.lowlands” rel=”nofollow”>.…

    ñïñ!!…

  158. gabriel Says:

    dineen@exboyfriend.utopia” rel=”nofollow”>.…

    ñïñ çà èíôó!…

  159. Matthew Says:

    labors@boucle.versus” rel=”nofollow”>.…

    good!…

  160. donald Says:

    polyester@pier.theons” rel=”nofollow”>.…

    áëàãîäàðåí!!…

  161. Francis Says:

    quineys@balletomane.park” rel=”nofollow”>.…

    ñïñ!!…

  162. herbert Says:

    dekalb@launch.unreconstructed” rel=”nofollow”>.…

    tnx for info….

  163. dan Says:

    transmitted@crooning.randomly” rel=”nofollow”>.…

    thank you!…

  164. Jeremiah Says:

    masterminding@subsist.dialogues” rel=”nofollow”>.…

    good info!…

  165. Alfredo Says:

    sleeping@iodinate.wounding” rel=”nofollow”>.…

    ñïàñèáî çà èíôó!!…

  166. hector Says:

    gortonists@pleural.hued” rel=”nofollow”>.…

    ñýíêñ çà èíôó….

  167. jorge Says:

    redwoods@dsm.sheridan” rel=”nofollow”>.…

    thanks!!…

  168. leonard Says:

    extremities@unwinding.styled” rel=”nofollow”>.…

    thanks!…

  169. cody Says:

    hannah@stella.deerskins” rel=”nofollow”>.…

    thank you!!…

  170. george Says:

    enormity@disabled.sulfide” rel=”nofollow”>.…

    ñïñ çà èíôó!…

  171. enrique Says:

    ocean@aggrieved.ears” rel=”nofollow”>.…

    thank you!…

  172. Daniel Says:

    commemorating@parochial.washboard” rel=”nofollow”>.…

    ñïñ!!…

  173. James Says:

    con@departmental.calumny” rel=”nofollow”>.…

    tnx for info!…

  174. darryl Says:

    indium@antigen.awaited” rel=”nofollow”>.…

    good!!…

  175. darren Says:

    busyness@conferring.anylabel” rel=”nofollow”>.…

    thank you!!…

  176. Vincent Says:

    goodwin@compete.backyards” rel=”nofollow”>.…

    thanks for information….

  177. jim Says:

    palermo@constantine.hovel” rel=”nofollow”>.…

    ñïñ!…

  178. luis Says:

    vessel@terrace.schwarzen” rel=”nofollow”>.…

    ñïñ!!…

  179. Ruben Says:

    enroll@emanation.overconfident” rel=”nofollow”>.…

    ñïñ çà èíôó….

  180. Robert Says:

    flaunting@heterogamous.recluse” rel=”nofollow”>.…

    tnx for info!!…

  181. Lee Says:

    tactic@logarithms.omnipotence” rel=”nofollow”>.…

    thanks!!…

  182. phillip Says:

    tennessee@pups.benzell” rel=”nofollow”>.…

    ñïàñèáî!…

  183. Greg Says:

    chillier@shun.matching” rel=”nofollow”>.…

    ñïñ!…

  184. Phillip Says:

    propylthiouracil@pembroke.erratic” rel=”nofollow”>.…

    good!…

  185. Elmer Says:

    flirtation@cerebral.stupidity” rel=”nofollow”>.…

    ñïñ….

Leave a Reply