Indifferentiable hash functions in the standard model. (16th April 2021)

• Record Type: Journal Article
• Authors: Partala, Juha
• Is Part Of: IET information security. Volume 15:Number 4(2021)
• Page Start: 309
• Page End: 316
• Publication Date: 2021-04-16
• Subjects: Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/ise2.12025
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract: Indifferentiability of iterated hash functions is seen as evidence that there are no structural flaws in the iteration structure of the algorithm. However, it is often overlooked that such considerations only hold in the random oracle model and do not give any guarantee in the standard model. In this article, we show the following separation result: there is a hash function that is indifferentiable from a random oracle, but is totally insecure in the standard model. In particular, we show that it does not satisfy collision or multicollision‐resistance, second preimage‐resistance or preimage‐resistance for any family of compression functions. Therefore, at least in theory, hash function indifferentiability does not guarantee the structural integrity of the hash algorithm in the standard model. Results in the random oracle model are not affected.