Lecture Notes in Computer Science vol:2894 pages:228-245
ASIACRYPT 2003 date:November 30 - December 04, 2003
HAVAL is a cryptographic hash function proposed in 1992 by Zheng, Pieprzyk and Seberry. Its has a structure that is quite similar to other well-known hash functions such as MD4 And MD5. The specification of HAVAL includes a security parameter, the number of passes (that is, the number of times that a particular word of the message is used in the computation) can be chosen equal to 3, 4 or 5. In this paper we describe a practical attack that finds collisions for the 3-pass version of HAVAL. This means that it is possible to generate pairs of messages hashing to the same value. The computational complexity of the attack corresponds to about 2(29) computations of the compression function of 3-pass HAVAL; the required amount of memory is negligible.