A Symbolic Intruder Model for Hash-Collision Attacks

Yannick Chevalier (1, 2) , Mounira Kourjieh (3)

1 IRIT-LILaC - Logique, Interaction, Langue et Calcul
2 UT3 - Université Toulouse III - Paul Sabatier
3 IRIT - Institut de recherche en informatique de Toulouse

In the recent years, several practical methods have been published to compute collisions on some commonly used hash functions. In this paper we present a method to take into account, at the symbolic level, that an intruder actively attacking a protocol execution may use these collision algorithms in reasonable time during the attack. Our decision procedure relies on the reduction of constraint solving for an intruder exploiting the collision properties of hush functions to constraint solving for an intruder operating on words.

Mots clés: decision procedure; Cryptographic protocol; collision-vulnerable hash functions; reachability problem; decision procedure.

Domaines: Cryptographie et sécurité [cs.CR]

Yannick Chevalier, Mounira Kourjieh. A Symbolic Intruder Model for Hash-Collision Attacks. CSTVA'06, Sep 2006, Nantes, France. ⟨hal-00116845⟩