Collisions and Near-Collisions for Reduced-Round Tiger

We describe a collision-finding attack on 16 rounds of the Tiger hash function requiring the time for about 244 compression function invocations. Another attack generates pseudo-near collisions, but for 20 rounds of Tiger with work less than that of 248 compression function invocations. Since Tiger has only 24 rounds, these attacks may raise some questions about the security of Tiger. In developing these attacks, we adapt the ideas of message modification attacks and neutral bits, developed in the analysis of MD4 family hashes, to a completely different hash function design.

• Type: Conference
• Year: 2006
• Where: FSE
• Authors: John Kelsey, Stefan Lucks
• Keywords: Compression Function Invocations, Cryptology, FSE 2006, Message Modification Attacks, Tiger Hash Function