• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2007, Vol. 29 ›› Issue (1): 45-48.

• 论文 • 上一篇    下一篇

关于MD5强度分析的研究

崔国华 周荣华 粟栗   

  • 出版日期:2007-01-01 发布日期:2010-05-30

  • Online:2007-01-01 Published:2010-05-30

摘要:

本文试图通过对MD5算法强度的分析,结合现有的碰撞分析的结论,为Hash算法的改进提出相应的思路。作为一个广为使用的Hash算法的MD5,一次循环包含了四轮64步及一次累加运算。本文通过对它由步到轮,再由轮到全局循环的分析,给出了现有碰撞分析的突破点及怎样弥补这些已被突破的缺陷。在现有研究的基础上,本文主要改进了文献[1]中给出的各步分析的结论;利用改进的结论将文献[1]中给出的概率分析非概率化;在全局碰撞的分析中给出了单轮的最大k-原像攻击的可能性;在文章的最后给出了Hash函数的四个个可能的改进方向及相应的意见。

关键词: MD5 强度分析 哈希函数 碰撞

Abstract:

Analyzing the resistibility of the MD5 algorithm, this paper tries to give some advice and prediction on how to improve Hash functions.As a widely used Hash function, an iteration of the MD5 algorithm includes 4 rounds, 64 steps and one addition.Through the analyses from steps to rounds, and from rounds to iterations, the authors give the break points of recent research and how to overcome them. Based on the recent research in the Hash world, the authors ameliorate the conclusions of reference 1,make the probability analysis of reference 1confirmable with the ameliorated conclusions,give the biggest k of the k-preimage attack of Wang-like collisions,and give four directions and advice on how to improve Hash functions at the end of this paper.

Key words: MD5;resistibility analysis;Hash function;collision