It has been proposed to use double-DES as a fixed-length collision- resistant hash function within the Merkle-Damgård transform, in the following way. Define the hash function h : {0,1}112 → {0,1}64 as h(x1||X2) = DES,,(DES-,(064)) where |¤1| = |x2| = 56. (a) Write down an actual collision in this fixed-length hash function. (b) In how much time is it possible to find a preimage for the hash function. That is, given some y € {0,1}64 show how to find a pair (x1, x2) such that h(x1||x2) = y. Make your attack as quick as possible. Does your attack make it possible to find a preimage that "makes sense" (say, one that contains an English word)? (c) What happens when h as above is used in the Merkle-Damgård transform? Find the most effective attack that you can think of.

Advanced Engineering Mathematics
10th Edition
ISBN:9780470458365
Author:Erwin Kreyszig
Publisher:Erwin Kreyszig
Chapter2: Second-order Linear Odes
Section: Chapter Questions
Problem 1RQ
icon
Related questions
Question
5.9 ILl has been proposed to use double-DES as a ſixed-length collision-
resistant hash function within the Merkle-Damgård transform, in the
following way. Define the hash function h : {0,1}112 .
h(x1||r2) = DES=, (DES,(064)) where |¤1| = |x2| = 56.
{0, 1}64 as
%3D
(a) Write down an actual collision in this fixed-length hash function.
(b) In how much time is it possible to find a preimage for the hash
function. That is, given some y e {0,1}64 show how to find a
pair (x1, x2) such that h(x1||x2) = y. Make your attack as quick
as possible. Does your attack make it possible to find a preimage
that "makes sense" (say, one that contains an English word)?
(c) What happens when h as above is used in the Merkle-Damgård
transform? Find the most effective attack that you can think of.
Transcribed Image Text:5.9 ILl has been proposed to use double-DES as a ſixed-length collision- resistant hash function within the Merkle-Damgård transform, in the following way. Define the hash function h : {0,1}112 . h(x1||r2) = DES=, (DES,(064)) where |¤1| = |x2| = 56. {0, 1}64 as %3D (a) Write down an actual collision in this fixed-length hash function. (b) In how much time is it possible to find a preimage for the hash function. That is, given some y e {0,1}64 show how to find a pair (x1, x2) such that h(x1||x2) = y. Make your attack as quick as possible. Does your attack make it possible to find a preimage that "makes sense" (say, one that contains an English word)? (c) What happens when h as above is used in the Merkle-Damgård transform? Find the most effective attack that you can think of.
Expert Solution
steps

Step by step

Solved in 3 steps with 1 images

Blurred answer
Recommended textbooks for you
Advanced Engineering Mathematics
Advanced Engineering Mathematics
Advanced Math
ISBN:
9780470458365
Author:
Erwin Kreyszig
Publisher:
Wiley, John & Sons, Incorporated
Numerical Methods for Engineers
Numerical Methods for Engineers
Advanced Math
ISBN:
9780073397924
Author:
Steven C. Chapra Dr., Raymond P. Canale
Publisher:
McGraw-Hill Education
Introductory Mathematics for Engineering Applicat…
Introductory Mathematics for Engineering Applicat…
Advanced Math
ISBN:
9781118141809
Author:
Nathan Klingbeil
Publisher:
WILEY
Mathematics For Machine Technology
Mathematics For Machine Technology
Advanced Math
ISBN:
9781337798310
Author:
Peterson, John.
Publisher:
Cengage Learning,
Basic Technical Mathematics
Basic Technical Mathematics
Advanced Math
ISBN:
9780134437705
Author:
Washington
Publisher:
PEARSON
Topology
Topology
Advanced Math
ISBN:
9780134689517
Author:
Munkres, James R.
Publisher:
Pearson,