Search framework for neutral bits and boomerangs in SHA‐1 collision attacks

• Published in: IET information security Vol. 17; no. 4; pp. 647 - 663
• Main Authors: Li, Degang, Yang, Yang, Zeng, Guang
• Format: Journal Article
• Language: English
• Published: College Station John Wiley & Sons, Inc 01.07.2023; Wiley
• Subjects: Algorithms; collision attack; cryptography; Digital signatures; Frame analysis; message searching; SHA‐1
• ISSN: 1751-8709; 1751-8717; 1751-8717; 2831-3224
• DOI: 10.1049/ise2.12122

Neutral bits and boomerangs are key techniques for accelerating collision search in SHA‐1 attacks. The current acceleration techniques for SHA‐1 near‐collision attacks are reviewed and a generic search framework for neutral bits and boomerangs is presented. The framework can efficiently construct auxiliary paths for a given differential path and message bit relations and find and store ideal boomerangs. The framework was applied to free‐start attacks for 76‐step SHA‐1, and the complexity was reduced from 250.25 ${2}^{50.25}$ to 247.9 ${2}^{47.9}$. Relaxing the boomerang's restrictions on message words, the authors propose an accelerating technique termed semi‐boomerangs, combined with the search framework of boomerangs, which increases the speed of collision search by 3.48 times in a free‐start attack for 80‐step SHA‐1 and the complexity for 80‐step attack was reduced from 257.5 ${2}^{57.5}$ to 255.7 ${2}^{55.7}$. A search framework for boomerangs and neutral bits is given. Using this framework the authors improve the free‐start collision attack for SHA‐1 and reduce the complexity of the attack.