Skip to main content

Collisions are not Incidental: A Compression Function Exploiting Discrete Geometry

Dimitar Jetchev, Onur ??zen, Martijn Stam, Collisions are not Incidental: A Compression Function Exploiting Discrete Geometry. Theory of Cryptography Conference (TCC 2012), pp. 303–320. March 2012. No electronic version available. External information

Abstract

We present a new construction of a compression function f: {0,1}^(3n) -> {0,1}^(2n) that uses two parallel calls to an ideal primitive (an ideal blockcipher or a public random function) from 2n to n bits. This is similar to the well-known MDC-2 or the recently proposed MJH by Lee and Stam (CT-RSA'11). However, unlike these constructions, we show already in the compression function that an adversary limited (asymptotically in n) to O(2^(2n(1-\delta)/3))$ queries (for any \delta>0) has disappearing advantage to find collisions. A key component of our construction is the use of the Szemer\'edi--Trotter theorem over finite fields to bound the number of full compression function evaluations an adversary can make, in terms of the number of queries to the underlying primitives. Moreover, for the security proof we rely on a new abstraction that refines and strengthens existing techniques. We believe that this framework elucidates existing proofs and we consider it of independent interest.

Bibtex entry.

Contact details

Publication Admin