Automatic Search of Differential

Automatic Search of Differential Path in MD4 G. Leurent Introduction MD4 Wang's attack Understand and automate Sufficient conditions Step operation SC Algorithm Differential Path Message difference Results Collisions 2nd preimage NMAC Attack Conclusion Automatic Search of Differential Path in MD4 Pierre-Alain Fouque, Gaetan Leurent, Phong Nguyen Laboratoire d'Informatique de l'Ecole Normale Superieure, Departement d'Informatique, 45 rue d'Ulm, 75230 Paris Cedex 05, France Ecrypt Hash Workshop, May 2007 1 / 37

• laboratoire d'informatique de l'ecole normale


• general design


• merkle-damg˚ard block size


• bits internal state


• hash function