Full Key Recovery attack on HMAC MD4

Full Key-Recovery attack on HMAC-MD4 G. Leurent Introduction MD4 HMAC and NMAC Previous work Wang's attack NMAC attack New ideas IV-dependent paths Message pairs Differential paths Extracting more Conclusion Full Key-Recovery Attacks on HMAC/NMAC-MD4 and NMAC-MD5 Pierre-Alain Fouque, Gaëtan Leurent, Phong Nguyen Laboratoire d'Informatique de l'École Normale Supérieure CRYPTO 2007 1/ 26

• laboratoire d'informatique de l'ecole normale


• introduction md4


• bob ?


• nmac attack


• bob share


• full key-recovery