呂守箴(OpenBlue) says to 網路攻防戰~資安閒聊群組
標題:對密碼演算法 SHA-3 的攻擊 摘要: 隔壁棚剛順利打趴 SHA-1 (Google 與 CWI Amsterdam 合作,找到 SHA-1 第一個 collision),還是有人在針對比較新的演算法在攻擊:「SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3」。 完整的 SHA-3 是 24 rounds,這次打的是 9 rounds 版本,雖然有段距離,但這等於是大進展: Based on this we propose a new distinguisher called SymSum for the SHA3 family which penetrates up to 9 rounds and outperforms the ZeroSum distinguisher by a factor of four. 不過 SHA-3 用的人不算多,該不會在還沒成為主流就被打趴... 引用來源: https://blog.gslin.org/archives/2017/02/24/7143/%E5%B0%8D-sha-3-%E7%9A%84%E6%94%BB%E6%93%8A/ 論文下載處: SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3 https://eprint.iacr.org/2017/165.pdf 原始資料: Cryptology ePrint Archive: Report 2017/165 https://eprint.iacr.org/2017/165