Cryptographic Hash-Function Basics: Definitions, Implications, and Separations for Preimage Resistance, Second-Preimage Resistance, and Collision Resistance

Abstract

Abstract. We consider basic notions of security for cryptographic hash functions: collision resistance, preimage resistance, and second-preimage resistance. We give seven different definitions that correspond to these three underlying ideas, and then we work out all of the implications and separations among these seven definitions within the concrete-security, provable-security framework. Because our results are concrete, we can show two types of implications, conventional and provisional , where the strength of the latter depends on the amount of compression achieved by the hash function. We also distinguish two types of separations, conditional and unconditional . When constructing counterexamples for our separations, we are careful to preserve specified hash-function domains and ranges; this rules out some pathological counterexamples and makes the separations more meaningful in practice. Four of our definitions are standard while three appear to be new; some of our relations and separations have appeared, others have not. Here we give a modern treatment that acts to catalog, in one place and with carefully-considered nomenclature, the most basic security notions for cryptographic hash functions.

A Family of Fast Syndrome Based Cryptographic Hash Functions

“…As stated in [11,17], a cryptographic hash function has to be pre-image resistant, second pre-image resistant and collision resistant. As the second pre-image resistance is strictly weaker than collision resistance, we will only check that the hash function is collision free and resistant to inversion.…”

The MD2 Hash Function Is Not One-Way

“…A classical reference is [9], however a new classification of these notions has been recently given in [13].…”

“…Recently the names "aPre" ("a" stands for "always"), "ePre" ("e" stands for "everywhere") and "Pre" have been given to these 3 notions [13]. In [9], the terminology of "preimage resistance" and "pseudo-preimage resistance" is used.…”

Higher Order Universal One-Way Hash Functions

“…Recently, Rogaway and Shrimpton suggested seven simple and nice definitions of hash functions including CRHF and UOWHF [6], but we prefer to use some games to define our objects and to describe our work.…”