提出了对DHA-256散列函数37轮的原像攻击以及39轮的伪碰撞攻击。基于中间相遇攻击,利用Biclique方法可以改进之前对DHA-256的原像分析结果,将攻击轮数从原来的35轮提高到了37轮。通过上述方法还可以构造对DHA-256的39轮伪碰撞。最终,以2255.5的时间复杂度以及23的空间复杂度构造了对DHA-256的37轮原像,并以2127.5的时间复杂度以及常数2的空间复杂度构造了对DHA-256的39轮伪碰撞。这是目前对DHA-256最好的原像与碰撞攻击结果。
A preimage attack on DHA-256 hash function reduced to 37-round and a pseudo collision attack on the func- tion reduced to 39-round were proposed respectively. Based on the meet-in-the-middle attack, the Biclique technique was used to improve the preimage attack from 35-round to 37-round. A 39-round pseudo collision was achieved using the Bi- clique technique. Overall, a preimage of DHA-256 was constructed with a complexity of 2255.5 and a memory of 23. Besides, a pseudo collision of DHA-256 was proposed with a complexity of 2127.5 . These are the best results of preimage and collision attack on DHA-256 hash functlon.