Gröbner Basis Based Cryptanalysis of SHA-1

(1)

!"

# $%&'&

(&)*&

+,(&!""!

, &'*' '&' -.

%/'0'

' 111

/2 2'2

# '2)*&

34& !!

5 6&'7' 8''&&

!'09 6:&' 8!'

&

0;* 60*9 *&

7& ' %

0 & & && '*

6:&% &+<%%&& =&' ' 9

0 &7 +<%%&&=& &&06

'7 >&%>'&*'&& '?

=%&'+<%%&&=0 &!'9

%&'*'&& '?&

&&'?7&

=*

9 & 0 6 ' 7

&& !' 0 ;* & 9

7& ' ?& 7

&

&&'?-& %.7&6:&''&

0

9 &''& %&

& * &7&07*7@%*'%

=&''+<%%&&0

! "" # $$ % &' &( ))* + $$

$((# ))%&'&(',"$ *

$" % -. ))/ % -. ))+ , #

0'1$$%-.$((#""

"#""1+2 /3 +1'

" ! %$% # " " 4 5 " # #

# +' 6 7 4+5 4 5 " $$ * " $8%

1

* $' 9":8 4/5 $% #

*%"$'$$"

(2)

;$%" !"< 7 425"

# # " # "" # + =613 &0; 4>5

415 $$ " &0; + " "" # " "

$8% +$$1

1

$(%'4/545 Æ

"*+3"($$8%

("#1

$"$($$"

1

'?#'4*5 4)5 4>5@

" $$% " % " +3 " # ' A

" " "<' A %

( # Æ %# < ( #

!$ # ' #

( # Æ # "(

" $ " ( ( #

"""(! #B

""!$(!',"(#

" $8% # " ! ' " # +3 "

$8%#"!1

!?""$

(% <(1

$8$%@"7C"1

$' (#%#+3""#

7C ' "# "# "$8%# "!

#"#1

! "7C"

1

'."""$8%1

! %$(%

" '( B " " $(% "< #

'

,% ( # " ' 1 ( " $ #

7C %' / ( !'

" " %$% # ' + 8$ " Æ

" Æ % " '

2 $$ $(

!' ( ($#$(!

" "$# ' > "

#%$%#"+3'3 "#%$%

# " # ' 7C %$% # " #

" %$%#"# !'$$8 (

" """'

."""#2*""##""1

'

"" D"""# "2*"(

+1 "(?=@!8',+1#"$

(2 /1?

@8$"%

E?

@

# E 2>) " # # ' F 8$ #

E*>)

E? +@G? @G G G

(3)

" " " ( E ? @ ?*2> +1/* * 3) *)3

**/1+ >2 */ 1*@ # ! . ' " # 8$

/1"8 '

' &

1 #A-.-. 1!3"""

B1C(5A 1

B 1;A-.-.-.1

1C(5A 1

/?

7C#'

, (" "?#1

@'

9$"%$#%""$" "

"" $'

% #%!"< !

'

H%"" 7'"!# + &0; *

+3'

" # " # 7C '' "

?*1 @'."%$$ (# "#

" $8%# " ' F !"<"%

%$( " $%' 45 "% " $8% !

# "# 1

9&I0.AC*+&$ "% " "%"( $(

$8%1

'"&$ "%""%#$"#

# !' ." % , "% ""

$#!'."!$$

" ( % <8 " (

2'."!#$

#"('

7 $ # $(# 1

*11

' #% "

1

"*11

'7"%"" # 1

" 1

"($

% "B($$

?

@

1

G 1 GG 1 G 1 1

'

E?

@ ¼

E? ¼

¼

@

? ¼

@

E

?

¼

@E?*@

*

E

?

¼

@E?*@

*

¦

E

E?

@

E?

@

(4)

(" ¦

E

¼

G

¦

E ¼

G

'

F"(! J (KJK! #'

! ¼

¼

"

" #

? ¦

¦

@

$

% ?

@

$& %

1

?

@ $& %

("LC "%(?

@

$"(' ""#$(?

@

" ""#$%#'

("#! "%#"" #

'

E 1

? @

?

@?

@ ¼

¼

1

& Æ

Æ E? @Æ Æ

ÆÆ Æ

?Æ @E?Æ

@

Æ

E

' ."(#"! #Æ'

7!$ G Æ #',Æ E?

@ Æ Æ

E?

@ Æ

Æ GÆ

E?

G

@

"#( "#$(? ¼

@#(Æ

(%$'7"Æ ($#( $(? ¼

@#

JK'."$$!'%

""'.!"

"#'

9Æ

E?

@EÆ GÆ

E?

G

@'

9"#?

@#

E

E "

E

E*'

7!$ Æ #',Æ E?

@ Æ

E?

@

Æ Æ

E?

G

@

"$('

9Æ

E?

@EÆ Æ

E?

G

@

9"#?

@#

E

E "

E

E*'

" "" Æ EÆ

% "( Æ Æ

"

Æ Æ

E?**@'

A"%$% #'

(5)

1' ,! 1* !?# 1

@"

Æ

?EÆ 1@ Æ

?Æ 1@ Æ

?EÆ @ Æ '7

%"'

/' 9Æ % %

"'

' Æ %" "'

+' Æ ""##$(

!"<'

2' % #% (!

"< !'

"( $ +2'$ "

$ + #"<'" $ 2

#'""#$1

"%#7C " #$1%

$# #$/'

! Æ

,( (Æ

# ""# ¼¼

? ¼¼

@!" $#

" "( ('H%"

Æ$" #( '

! ""Æ #

"$ %%8$%#"

8$'

,(( Æ#"(%B

"

Æ? @EÆ

?Æ +@Æ Æ

" B % % " Æ #

%'

! $" % "Æ

% ?+3 3*@' " Æ

¡¡¡

"

E$

E*

E$

E'."%'

("(#"%8$

E?

@

# *+% "

'<(

#

(%

¼

#

¼

? ¼

E ¼

@

(6)

."$""

($% ?G@

(# ?G@%"!#'#

#

'7#

%

¼

#

¼

? ¼

E ¼

@

." $$8% #"

$'

H% " #

" %

8$% B " ' H% " " "

% # < ( Æ "

#' ." $ # Æ " % # <

"# Æ'7"( Æ'

A "" " #

( Æ%

"#JK JKJBK! "8

Æ'

" # $

.! #"#%#%Æ'

"< #% $$$% "" !%

%7' "<'

7 7C ! " "(

J$K " # " ! ' ."

$(!!'

& '%

,"(!'7"4 54+5 ""<

"8$'

$ "<# #%

#

'7"? @

!8 " ?

@$ ?

@B(% "" $

"!#

"%<(!#

"#'

" "(!! !

# ' ." % " # # (#

' 7 E 1/ " # +3# E12 " # " #

'

, $ # " ! '

." # # ( Æ

?+@

?/*@'9#"'9"

"" $$ CC

"

#

C'

# !% B "%"

(# " ' "

#""';""

% " " "'

H%"( $ #"(!(

#'

?9( !@' )'

(7)

+ , ?

@

- E*

. / /

/ +

0 1

Æ

1 E* EG -

2 / Æ

Æ

! /

."$ " ""

%"

? @ # $( $' " "( E

'

H% "( ! #% " Æ

"

Æ ""(

# !

"'

& (" )*") +"

.B # ?E1/ #"+3 E12 #"

#@ 1!'

" " (!'#"

#"(" " #

7C %' .B #% #

' H " # " " ' #

# ' "

" ( !'# # " # " (

% " $(%! ! "

';#" % #

'7" 1'

." " # # B <' " "

"%'

& , % -

F B Æ" ! #

'

$ !##'

?$( !#@ ' )

! , ?

@

+ 3 ! ?

@

!4

/ !

- / !4

! 5/ 6

. 7 1

(8)

8 ! ?@> "'"#8$"

+3 "+"E1/'"#"# "

12"E12'

?1@ " 3 " # 8$ " # *

3B' ."$ $ <( (%# $%

<(Æ"B('

"<$ '2' ($#"(

"'

& . ) - / / 0

1' '

("$#(""%###"$('

) - 78$"1#

#$%' ?+33*@'

6

425 $% (

" (

E* E*/'

6

425 %

G

<

425' -"

$"# #"(

E*

E*/',"$%#

?2@'

, % ?

@ ?

@

E

'

7 " "

%

G

'

%

C %"#

C' (

< ( # "%8$$%

C' %

$

% " (

% < "#

?2@E*"

'0

E

G

#" %

C

?

@#$%"# '9

"$%C

'7 <

$ $%'-"

4

5" % E1/"E+3 E12

"E3*#8$'

6 E

" # #( Æ ""

" ' 6 " # B'0 E

?@

"%$%

E

G

#?@

N

<

' , "

N

<

%#<""# N

'

." "1#'

' )' *

! E* ?

@ ?

@

+ E*

- / * / 0 /

!

.

?

@

?

G@

* 1EG +

0 / * ?2@ Æ

29 !

2 :

,;

(9)

- " "(" $% $1'7

"%#$%<$2"(" #<

# ( " N

*

'

0 ) - 6

" # $ E

#% ( Æ

'

-" # " '." # (

"" % ! % #%

$ ' ( !

$$ $( ! " (

$ # ' $% #

"(%$ '

% !& '

"#"+3 "(!?$1"1@

$$ 1/'

."$8%#"#"+3(#'#$1 "+

>1/'"$%"$#$1$"$/

1

',#1/ "1)'.B"1) 1

2B'"$8%$(1

G1

1

!?<(1

$"$ 8$%@

"7C"1

$'

""+3'

")%/3 7#"(""

""7('?A# "$$"('@

." " ('9 "

745';8$ ##" ( .1'

"Æ * " - $" * )

7"Æ+3?./@ "#

#?. +@ (Æ

?.2@ "#$'"#

C C

E

CC

E

G

CC

E

CC

E

G

CC

E

CC

E

G'

CC "# #.) * 1'

CC CCB

"

E* $(%'

C C CCB

"

E* $(%'

CC B

" $

"'

CC B

" $

"'

CC CCB

"

E* $(%'

CC CCB

"

(10)

! B 1 1 1

!3 1 1 1 1

! 1 1 1 1

!! 1 1 1 1

!B 1 1 1 1

! 1 1 1 1

!1 1 1 1 1

B" 1 1 1 1

B 1 1 1 1

B31111111 1 1 1

B 11111111 1 1

B! 1 1 1 1

BB 1111111 1 1

B 1 B1 1

B 11111111 1 1

B 1 B1 1

B1 11111111 1 1

"1111111 B1 1

1 1 1 1

3 B11111111 1

1111111 1 1

!1111111 1 1 1

B1111111 1 1

B1 1 1

1 1 1

B1111111 1 1

1B111111 B1 1

" B11111B1 1

1111111 1 1

3 BB111111 1

B11111B111111 1

! 1B111111 1 1

B 1 1 1

111111 1

11111BB111111 1

B11111B1 1

1 1 1 1

"B1111111 1

111111 B 1

3B111111 B1 1

111111 1 1 1

!1111111 1 1

B111111 1 1 1

11111B1 1 1

11111111 1 1

B111111111111! 11111111

1B11111B1 1 1 1

" B11111B1 11D11 B111

1 1111 111111

3 1 1 1" 111

111111 1 11111 B111

! 1 111111111 111111

B 11111B1 1 B1B

1111111 B1 1 1

1111111B11111B11111B 111111

B11111111111B11111111111111

1 1111111 1 1 1

(11)

&&

*% B ! 1

-B.

*% B ! 1

-B .

Æ'

'

(12)

CC B

" # >"'

" "#$ CC8%"# 1'

."##'

(13)

4 " - '% / / # $ 1 " 1 /

E

E *

E*

E E

E * E*

E

*

E *

G E

G

E * G E * G E

G

E*

G

E G E*

G

E G E

G

E

G

E

G

E

G

E

G

E G

E

G E

G

E

G

E

G

E

G

E

"( "!(

E

E*

G E

G

E*""%!1/'."$%""!(

!#" ( !?$1# "1@ 1

',"

1) B%1B#$/"1'

(' - #"#'

E* 22/2/)+) > >)22 1* )+1/)313 * /+ * 21

21 +1/>2*2*2> 1*1 + + ) 22/+2/) )>+)1 +*2)

¼

E*/ 22/2+)+1> 33>)22*1 )+1>3))313 )3 /+ 21

21 +1>>2* 2> 1+*1 + * ) 22+2/+)2 )>+)/ +*2))

E*2+*>)2/ 3+ )+ ++2)+**3*)1>)2 )*>>112+3)

+/23)2*/3/*3)1)3>)3 12)* 3>* +1 ) +3+ *1 *1>3

¼

E*/2+*>)2+ 32 1)+ *3++2)+*3* *)>)2 ))3>>11>+3)

+/2)2*/32) 3)1)> )3 132)* 3>3 +1 >3+ *1*13

E*1))2/*++ 1 ) +>/31*1> *>/*+3+

2 //1 3331)+3**3/12>/> *13 ) >/ /3)2

¼

(14)

(15)

(16)

&&

*% B ! 1

-B.

*% B ! 1

!

""#

"

!

"

""$$#

"$%%%%%$%%

"%$%%$$%$%%%

$%$%$%%%$%%$$$$

-B .

:'*':&Æ'&

'

(17)

E*) )2//2+++>/ >>2 /)312+1/* 2>/22>2

+3+ 1)>)>*1> 1)>2 1+ >+23/133+1+ / ++

¼

E*/) )2 //22/+>/*3>>2*/)3+*)2+13 2>/ 22>

+3+ 1)>)>*1 ++ 1)>+2+ 1+3+*+23)/13+3>1+ / +3+

E* 2/22)+/3* 3 31>)/ >12*1 ) /+)

21/12*1 *3** 1 > 2 >21)2 >>1*+1+**22 +2

¼

E*/ 2/2 2//3* 333231>)3/ >23*)31 ) /+3)

21/12/2 *3) * 1 1)* 2 >2)2 >>2*>1+**2> +*

& '

,"# 7C ! ""

'%"'7"

%#"! "Æ#"

'

5 ") % / 3

7#$##((%7

'#"#'7C

%"

' / $"

#%"#$D%#<

#'7%#<""(

$$$'7"( #(%"%#<',"

"(7C'7"

.>'

5 "Æ

,"( ""("$($

(Æ"#'7".3'

.3 C C

E

CC

E

G CC

E

CC

E

G CC

E

CC

E

G'

H% " # *3* #

*+' #

" ¼

¼

#

¼

? ¼

E ¼

@'." #

#'."2>

'

(18)

¦

(19)

(20)

(21)

(22)

(23)

5 ' )

7 . ) * 1 "

<$#'

-(Æ %" ?./@'% ./

C C CC CC CC CC CC 3'1'

CC "# #.) * 1'

CC CCB

"

E* $(%'

C C CCB

"

E* $(%'

CC B

" $

"'

CC B

" $

"'

CC CCB

"

E* $(%'

CC CCB

" E $(%'

CC '

CC B

" # >"'

CC '

H%(Æ

"""$1

"1 B "(#

¡¡¡ ¡¡¡

"!

¼ ¼ ¼ # ¼ ? ¼ E ¼

@'H%"$$"#%"

Æ

Æ "(

#!12 ' >/' )# "%#*12' .")

"#'

0" - '% / / # $ 1 " 1 "

#) >12'

F1

G F1G

F1 F1GF1GF1GF

F1 F0

0- #$/"1 "#2

' !

-" 2

#1>3* '.B" 2

" 1' " *

?$C-C ./@3 1"""#CC'

5 . ' 6

- "$8%" "$( !$$

"1'" ) >12 "" " $/

" $% " " $ # $ 1 $ " # $ / 1

' " 2

(24)

(25)

!!

(26)

!!

(27)

!!

(28)

(29)

!$ $"!#$ 1

'""1

"("$8%!#"#1

!8$%

$ $#""' 4)5 8/#

"(' "$8% 1

!

""% $(% "'

5 ! 6 - "-

7"8$# E?

@%"1'

F3B1 " ""B !1 "1 !B 3" 1 "!1B

3""1!B "B"1133333 "" !3B" !

." ( !# *3* "( #

*13'

(

."$$%$("#%$%#""#8$

#""#7C$('7$("$

""(!"<'."$$"$(

"$8%# +3 # % ' (

"$8%#"!"# #

1

! 1

'

)

0 20 50 0 9 0 %0 $60 % H&& 1 ' 5''

>2)5(5I11! !30

0 2050H,&&1>5I(11B"11!0

0 #0%'09H/D&&1>5I(""! 30

B0 0/%%H &&;/B>#&72 "" ! "0

!0 $0 040C0640076060&0#0060H/D

&&@E&?&5'>'* J,5I11

%&&0

0 09H;&& '&#&0&''&&>5I(

11B1 0

30 C06C0$/0#0C0IH &&&#&;/B'52;/>

2)5(5I11!0

0 C06/0#C0IH&#E$>&#-11!.

!B!!! 0

"0 C0600I#0IH &&>'& &6&

11!

10 C0 6I0 $0I0 IH,7& >5I(11! 5&&

&% ':&H5&&>

0 C06I0$0I0IH#'&& #>5I(11!3 0

0 C060IH7 ;/!'(&#&>2)5(5I11!"!0

0 C060II0$0IH2Æ &&1>5I(11! 0

B0 C06H&1>""30

!0 C06H *'&1>""0

0 C0 6 H&& & #&;/B ;/!E$ 52;/>5 &&

:1B20

30 C0 6 H && & #&' /&> 5 11 &

(30)

*+ , - , ,

, .

1 " #JK(%$' "" !

JC'

A%#'

,""$$% '."#

$"""((%/ '

,"# %"#""$(

$'

""?(@

CC'

##7C" "(",'##

,'##' H% 8$ 7C (#+3 $

'

(31)

i = 0 d0000002

i = 1 20000000

i = 2 60000002

i = 3 60000003

i = 4 20000000

i = 5 e0000002

i = 6 60000002

i = 7 80000001

i = 8 0

i = 9 3

i = 10 40000002

i = 11 40000000

i = 12 e0000002

i = 13 a0000000

i = 14 80000000

i = 15 20000001

i = 16 20000000

i = 17 80000001

i = 18 40000002

i = 19 c0000003

i = 20 40000002

i = 21 3

i = 22 40000002

i = 23 c0000003

i = 24 c0000002

i = 25 1

i = 26 40000002

i = 27 c0000003

i = 28 40000002

i = 29 80000001

i = 30 40000002

i = 31 40000002

i = 32 40000002

i = 33 2

i = 34 0

i = 35 80000002

i = 36 80000000

i = 37 80000002

i = 38 80000000

i = 39 0

i = 40 80000000

i = 41 80000000

i = 42 0

i = 43 80000000

i = 44 0

i = 45 80000002

i = 46 0

i = 47 80000000

i = 48 80000000

i = 49 0

i = 50 0

i = 51 0

i = 52 0

i = 53 0

i = 54 0

i = 55 0

i = 56 0

i = 57 0

i = 58 0

i = 0 d0000022

i = 1 20000000

i = 2 60000032

i = 3 60000043

i = 4 20000040

i = 5 e0000042

i = 6 60000002

i = 7 80000001

i = 8 20

i = 9 3

i = 10 40000052

i = 11 40000040

i = 12 e0000052

i = 13 a0000000

i = 14 80000040

i = 15 20000001

i = 16 20000060

i = 17 80000001

i = 18 40000042

i = 19 c0000043

i = 20 40000022

i = 21 3

i = 22 40000042

i = 23 c0000043

i = 24 c0000022

i = 25 1

i = 26 40000002

i = 27 c0000043

i = 28 40000062

i = 29 80000001

i = 30 40000042

i = 31 40000042

i = 32 40000002

i = 33 2

i = 34 40

i = 35 80000002

i = 36 80000000

i = 37 80000002

i = 38 80000040

i = 39 0

i = 40 80000040

i = 41 80000000

i = 42 40

i = 43 80000000

i = 44 40

i = 45 80000002

i = 46 0

i = 47 80000000

i = 48 80000000

i = 49 0

i = 50 0

i = 51 0

i = 52 0

i = 53 0

i = 54 0

i = 55 0

i = 56 0

i = 57 0

i = 58 0

i = 0 20

i = 1 0

i = 2 30

i = 3 40

i = 4 40

i = 5 40

i = 6 0

i = 7 0

i = 8 20

i = 9 0

i = 10 50

i = 11 40

i = 12 50

i = 13 0

i = 14 40

i = 15 0

i = 16 60

i = 17 0

i = 18 40

i = 19 40

i = 20 20

i = 21 0

i = 22 40

i = 23 40

i = 24 20

i = 25 0

i = 26 0

i = 27 40

i = 28 60

i = 29 0

i = 30 40

i = 31 40

i = 32 0

i = 33 0

i = 34 40

i = 35 0

i = 36 0

i = 37 0

i = 38 40

i = 39 0

i = 40 40

i = 41 0

i = 42 40

i = 43 0

i = 44 40

i = 45 0

i = 46 0

i = 47 0

i = 48 0

i = 49 0

i = 50 0

i = 51 0

i = 52 0

i = 53 0

i = 54 0

i = 55 0

i = 56 0

i = 57 0

i = 58 0

⊕

=

#'''&%*- .