• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>IEEE Transactions on Reliability >Finding Bugs in Cryptographic Hash Function Implementations
【24h】

Finding Bugs in Cryptographic Hash Function Implementations

机译：在加密哈希函数实现中查找错误

获取原文
获取原文并翻译 | 示例
       
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Cryptographic hash functions are security-critical algorithms with many practical applications, notably in digital signatures. Developing an approach to test them can be particularly difficult, and bugs can remain unnoticed for many years. We revisit the National Institute of Standards and Technology hash function competition, which was used to develop the SHA-3 standard, and apply a new testing strategy to all available reference implementations. Motivated by the cryptographic properties that a hash function should satisfy, we develop four tests. The Bit-Contribution Test checks if changes in the message affect the hash value, and the Bit-Exclusion Test checks that changes beyond the last message bit leave the hash value unchanged. We develop the Update Test to verify that messages are processed correctly in chunks, and then use combinatorial testing methods to reduce the test set size by several orders of magnitude while retaining the same fault-detection capability. Our tests detect bugs in 41 of the 86 reference implementations submitted to the SHA-3 competition, including the rediscovery of a bug in all submitted implementations of the SHA-3 finalist BLAKE. This bug remained undiscovered for seven years, and is particularly serious because it provides a simple strategy to modify the message without changing the hash value returned by the implementation. We detect these bugs using a fully automated testing approach.
机译：密码散列函数是具有许多实际应用（特别是在数字签名中）的安全性至关重要的算法。开发一种测试它们的方法可能特别困难，并且错误可能在很多年内未被发现。我们重新审视了用于开发SHA-3标准的美国国家标准技术研究院哈希函数竞赛，并将新的测试策略应用于所有可用的参考实现。基于哈希函数应满足的密码学性质，我们开发了四个测试。位贡献测试检查消息中的更改是否影响哈希值，而位排除测试则检查超出最后一个消息位的更改是否使哈希值保持不变。我们开发了Update Test（更新测试）以验证消息是否按块正确处理，然后使用组合测试方法将测试集的大小减少几个数量级，同时保留相同的故障检测能力。我们的测试检测了提交给SHA-3竞赛的86种参考实现中的41种错误，包括重新发现了SHA-3决赛入围者BLAKE的所有提交实现中的错误。此错误七年以来一直未被发现，并且特别严重，因为它提供了一种简单的策略来修改消息而不更改实现返回的哈希值。我们使用全自动测试方法来检测这些错误。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号