中文摘要：

为了研究Zodiac算法抵抗碰撞攻击的能力，根据算法的一个等价结构，分别给出了Zodiac算法的两个8轮和9轮区分器。通过在此区分器前后加适当的轮数，首先，利用9轮区分器对12轮到16轮的算法进行了碰撞攻击，其攻击的数据复杂度分别为2^15，2^31.2，2^31.58，2^31.7，2^63.9，时间复杂度分别为2^33.8，2^49.9，2^75.1，2^108，2^140.1；其次，利用8轮区分器对全轮算法进行了攻击，其攻击的数据复杂度和时间复杂度分别为2^60．6和2^173.9。结果表明：全轮的Zodiac-192／256算法均不能抵抗碰撞攻击。

英文摘要：

In order to research the ability of Zodiac algorithm against the collision attack, two 8-round and 9-round distinguishers of Zodiac algorithm based on an equivalent structure of it were proposed. Firstly, collision attacks were applied to the algorithm from 12-round to 16-round by adding proper rounds before or after the 9-round distinguishers. The data complexities were 2^15, 2^31.2, 2^31.5, 2^31.7 and 263.9, and the time complexities were 2^33.8, 2^49.9, 2^75.1, 2^108 and 2^140.1, respectively. Then the 8-round distinguishers were applied to the full-round algorithm. The data complexity and time complexity were 2^60.6 and 2^173.9, respectively. These results show that both full-round Zodiac-192 and full-round Zodiac-256 are not immune to collision attack.