full-disclosure - [SHA-3 Candidate] Mega Collision Attack!!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 12 Feb 2010 12:31:19 +0700
From: "A. Palupi" <pushmov.me@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: [SHA-3 Candidate] Mega Collision Attack!!

This is my Proof Of Concept:

---------------- (Round 2)
1.BLAKE
2.Blue Midnight Wish
3.Shabal
4.CubeHash
5.SHAVite-3
6.Hamsi

---------------- (Round 1)
7.Abacus
8.DynamicSHA(2)
9.StreamHash
10.MeshHash
11.Arirang
11.SWIFTX
12.HAIFA
----------------
....etc, you can try self for the others.

===================================

Try with this hex-file :


72 00 46 00 27 00 18 20 6c 00 50 00 33 00 20 20
43 00 e6 00 22 21 6f 00 07 00 21 20 7e 00 af 00
D9 00 6b 00 df 00 01 00 da 00 7e 00 22 21 1d 00
a4 00 15 00 5b 00 3a 20 e1 00 29 00 5e 00 A7 00
d2 00 1c 00 1c 20 18 20 f4 00 d4 00 a4 00 1c 00
75 00 f7 00 7e 00 5d 00 27 00 38 00 19 20 53 00
39 00 37 00 25 00 f1 00 42 00 7f 00 57 00 18 20
4b 00 27 00 3a 00 B8 00 62 00 b9 00 e3 00 1d 00
00 ab 00 ce 50 00 6e 00 55 00 21 20 20 00 52 00
0d 00 33 00 35 00 2d 00 11 00 78 01 69 00 7e 01
78 00 4f 00 7e 01 54 00 8F 00 F9 00 1b 00 c3 00
5c 00 a1 00 47 00 04 00 21 00 28 00 70 00 dc 02
20 00 d6 00 61 01 1a 20 21 20 ea 00 32 00 57 00
26 20 76 00 15 00 eb 00 03 00 21 00 27 00 0E 00
1d 20 B8 00 4f 00 44 00 69 00 42 00 76 00 5c 00
e8 00 1a 20 b1 00 18 20 fa 00 ee 00 7e 00 1c 00
21 20 e0 00 f0 00 bd 00 4e 00 0c 00 D8 00 A9 00
27 00 70 00 35 00 24 00 b5 00 59 00 b7 00 69 00
00 4e 00 ca ce 00 1f 00 6d 00 bf 00 31 00 3f 00
dc 00 f6 00 7c 00 57 00 2e 00 c4 00 18 00 5c 00
1a 00 c6 02 e8 00 6e 00 c1 00 1b 00 64 00 54 00
b3 00 71 00 dc 0b



72 00 46 00 27 00 18 20 6c 00 50 00 33 00 20 20
43 00 e6 00 22 21 6f 00 07 00 21 20 7e 00 af 00
D9 00 6b 00 df 00 01 00 da 00 7e 00 22 21 1d 00
a4 00 15 00 5b 00 3a 20 e1 00 29 00 5e 00 A7 00
d2 00 1c 00 1c 20 18 20 f4 00 d4 00 a4 00 1c 00
75 00 f7 00 7e 00 5d 00 27 00 38 00 19 20 53 00
39 00 37 00 25 00 f1 00 42 00 7f 00 57 00 18 20
4b 00 27 00 3a 00 B8 00 62 00 b9 00 e3 00 1d 00
00 ab 00 ce 50 00 6e 00 55 00 21 20 20 00 52 00
0d 00 33 00 35 00 2d 00 11 00 78 01 69 00 7e 01
78 00 4f 00 7e 01 54 00 8F 00 F9 00 1b 00 c3 00
5c 00 a1 00 47 00 04 00 21 00 28 00 70 00 dc 02
20 00 d6 00 61 01 1a 20 21 20 ea 00 32 00 57 00
26 20 76 00 15 00 eb 00 03 00 21 00 27 00 0E 00
1d 20 B8 00 4f 00 44 00 69 00 42 00 76 00 5c 00
e8 00 1a 20 b1 00 18 20 fa 00 ee 00 7e 00 1c 00
21 20 e0 00 f0 00 bd 00 4e 00 0c 00 D8 00 A9 00
27 00 70 00 35 00 24 00 b5 00 59 00 b7 00 69 00
00 4e 00 ca ce 00 1f 00 6d 00 bf 00 31 00 3f 00
dc 00 f6 00 7c 00 57 00 2e 00 c4 00 18 00 5c 00
1a 00 c6 02 e8 00 6e 00 c1 00 1b 00 64 00 54 00
b3 00 71 00 dc 0c



72 00 46 00 27 00 18 20 6c 00 50 00 33 00 20 20
43 00 e6 00 22 21 6f 00 07 00 21 20 7e 00 af 00
D9 00 6b 00 df 00 01 00 da 00 7e 00 22 21 1d 00
a4 00 15 00 5b 00 3a 20 e1 00 29 00 5e 00 A7 00
d2 00 1c 00 1c 20 18 20 f4 00 d4 00 a4 00 1c 00
75 00 f7 00 7e 00 5d 00 27 00 38 00 19 20 53 00
39 00 37 00 25 00 f1 00 42 00 7f 00 57 00 18 20
4b 00 27 00 3a 00 B8 00 62 00 b9 00 e3 00 1d 00
00 ab 00 ce 50 00 6e 00 55 00 21 20 20 00 52 00
0d 00 33 00 35 00 2d 00 11 00 78 01 69 00 7e 01
78 00 4f 00 7e 01 54 00 8F 00 F9 00 1b 00 c3 00
5c 00 a1 00 47 00 04 00 21 00 28 00 70 00 dc 02
20 00 d6 00 61 01 1a 20 21 20 ea 00 32 00 57 00
26 20 76 00 15 00 eb 00 03 00 21 00 27 00 0E 00
1d 20 B8 00 4f 00 44 00 69 00 42 00 76 00 5c 00
e8 00 1a 20 b1 00 18 20 fa 00 ee 00 7e 00 1c 00
21 20 e0 00 f0 00 bd 00 4e 00 0c 00 D8 00 A9 00
27 00 70 00 35 00 24 00 b5 00 59 00 b7 00 69 00
00 4e 00 ca ce 00 1f 00 6d 00 bf 00 31 00 3f 00
dc 00 f6 00 7c 00 57 00 2e 00 c4 00 18 00 5c 00
1a 00 c6 02 e8 00 6e 00 c1 00 1b 00 64 00 54 00
b3 00 71 00 dc 0d



72 00 46 00 27 00 18 20 6c 00 50 00 33 00 20 20
43 00 e6 00 22 21 6f 00 07 00 21 20 7e 00 af 00
D9 00 6b 00 df 00 01 00 da 00 7e 00 22 21 1d 00
a4 00 15 00 5b 00 3a 20 e1 00 29 00 5e 00 A7 00
d2 00 1c 00 1c 20 18 20 f4 00 d4 00 a4 00 1c 00
75 00 f7 00 7e 00 5d 00 27 00 38 00 19 20 53 00
39 00 37 00 25 00 f1 00 42 00 7f 00 57 00 18 20
4b 00 27 00 3a 00 B8 00 62 00 b9 00 e3 00 1d 00
00 ab 00 ce 50 00 6e 00 55 00 21 20 20 00 52 00
0d 00 33 00 35 00 2d 00 11 00 78 01 69 00 7e 01
78 00 4f 00 7e 01 54 00 8F 00 F9 00 1b 00 c3 00
5c 00 a1 00 47 00 04 00 21 00 28 00 70 00 dc 02
20 00 d6 00 61 01 1a 20 21 20 ea 00 32 00 57 00
26 20 76 00 15 00 eb 00 03 00 21 00 27 00 0E 00
1d 20 B8 00 4f 00 44 00 69 00 42 00 76 00 5c 00
e8 00 1a 20 b1 00 18 20 fa 00 ee 00 7e 00 1c 00
21 20 e0 00 f0 00 bd 00 4e 00 0c 00 D8 00 A9 00
27 00 70 00 35 00 24 00 b5 00 59 00 b7 00 69 00
00 4e 00 ca ce 00 1f 00 6d 00 bf 00 31 00 3f 00
dc 00 f6 00 7c 00 57 00 2e 00 c4 00 18 00 5c 00
1a 00 c6 02 e8 00 6e 00 c1 00 1b 00 64 00 54 00
b3 00 71 00 dc 0E



72 00 46 00 27 00 18 20 6c 00 50 00 33 00 20 20
43 00 e6 00 22 21 6f 00 07 00 21 20 7e 00 af 00
D9 00 6b 00 df 00 01 00 da 00 7e 00 22 21 1d 00
a4 00 15 00 5b 00 3a 20 e1 00 29 00 5e 00 A7 00
d2 00 1c 00 1c 20 18 20 f4 00 d4 00 a4 00 1c 00
75 00 f7 00 7e 00 5d 00 27 00 38 00 19 20 53 00
39 00 37 00 25 00 f1 00 42 00 7f 00 57 00 18 20
4b 00 27 00 3a 00 B8 00 62 00 b9 00 e3 00 1d 00
00 ab 00 ce 50 00 6e 00 55 00 21 20 20 00 52 00
0d 00 33 00 35 00 2d 00 11 00 78 01 69 00 7e 01
78 00 4f 00 7e 01 54 00 8F 00 F9 00 1b 00 c3 00
5c 00 a1 00 47 00 04 00 21 00 28 00 70 00 dc 02
20 00 d6 00 61 01 1a 20 21 20 ea 00 32 00 57 00
26 20 76 00 15 00 eb 00 03 00 21 00 27 00 0E 00
1d 20 B8 00 4f 00 44 00 69 00 42 00 76 00 5c 00
e8 00 1a 20 b1 00 18 20 fa 00 ee 00 7e 00 1c 00
21 20 e0 00 f0 00 bd 00 4e 00 0c 00 D8 00 A9 00
27 00 70 00 35 00 24 00 b5 00 59 00 b7 00 69 00
00 4e 00 ca ce 00 1f 00 6d 00 bf 00 31 00 3f 00
dc 00 f6 00 7c 00 57 00 2e 00 c4 00 18 00 5c 00
1a 00 c6 02 e8 00 6e 00 c1 00 1b 00 64 00 54 00
b3 00 71 00 dc 0E 0f



72 00 46 00 27 00 18 20 6c 00 50 00 33 00 20 20
43 00 e6 00 22 21 6f 00 07 00 21 20 7e 00 af 00
D9 00 6b 00 df 00 01 00 da 00 7e 00 22 21 1d 00
a4 00 15 00 5b 00 3a 20 e1 00 29 00 5e 00 A7 00
d2 00 1c 00 1c 20 18 20 f4 00 d4 00 a4 00 1c 00
75 00 f7 00 7e 00 5d 00 27 00 38 00 19 20 53 00
39 00 37 00 25 00 f1 00 42 00 7f 00 57 00 18 20
4b 00 27 00 3a 00 B8 00 62 00 b9 00 e3 00 1d 00
00 ab 00 ce 50 00 6e 00 55 00 21 20 20 00 52 00
0d 00 33 00 35 00 2d 00 11 00 78 01 69 00 7e 01
78 00 4f 00 7e 01 54 00 8F 00 F9 00 1b 00 c3 00
5c 00 a1 00 47 00 04 00 21 00 28 00 70 00 dc 02
20 00 d6 00 61 01 1a 20 21 20 ea 00 32 00 57 00
26 20 76 00 15 00 eb 00 03 00 21 00 27 00 0E 00
1d 20 B8 00 4f 00 44 00 69 00 42 00 76 00 5c 00
e8 00 1a 20 b1 00 18 20 fa 00 ee 00 7e 00 1c 00
21 20 e0 00 f0 00 bd 00 4e 00 0c 00 D8 00 A9 00
27 00 70 00 35 00 24 00 b5 00 59 00 b7 00 69 00
00 4e 00 ca ce 00 1f 00 6d 00 bf 00 31 00 3f 00
dc 00 f6 00 7c 00 57 00 2e 00 c4 00 18 00 5c 00
1a 00 c6 02 e8 00 6e 00 c1 00 1b 00 64 00 54 00
b3 00 71 00 DC 0E 10



72 00 46 00 27 00 18 20 6c 00 50 00 33 00 20 20
43 00 e6 00 22 21 6f 00 07 00 21 20 7e 00 af 00
D9 00 6b 00 df 00 01 00 da 00 7e 00 22 21 1d 00
a4 00 15 00 5b 00 3a 20 e1 00 29 00 5e 00 A7 00
d2 00 1c 00 1c 20 18 20 f4 00 d4 00 a4 00 1c 00
75 00 f7 00 7e 00 5d 00 27 00 38 00 19 20 53 00
39 00 37 00 25 00 f1 00 42 00 7f 00 57 00 18 20
4b 00 27 00 3a 00 B8 00 62 00 b9 00 e3 00 1d 00
00 ab 00 ce 50 00 6e 00 55 00 21 20 20 00 52 00
0d 00 33 00 35 00 2d 00 11 00 78 01 69 00 7e 01
78 00 4f 00 7e 01 54 00 8F 00 F9 00 1b 00 c3 00
5c 00 a1 00 47 00 04 00 21 00 28 00 70 00 dc 02
20 00 d6 00 61 01 1a 20 21 20 ea 00 32 00 57 00
26 20 76 00 15 00 eb 00 03 00 21 00 27 00 0E 00
1d 20 B8 00 4f 00 44 00 69 00 42 00 76 00 5c 00
e8 00 1a 20 b1 00 18 20 fa 00 ee 00 7e 00 1c 00
21 20 e0 00 f0 00 bd 00 4e 00 0c 00 D8 00 A9 00
27 00 70 00 35 00 24 00 b5 00 59 00 b7 00 69 00
00 4e 00 ca ce 00 1f 00 6d 00 bf 00 31 00 3f 00
dc 00 f6 00 7c 00 57 00 2e 00 c4 00 18 00 5c 00
1a 00 c6 02 e8 00 6e 00 c1 00 1b 00 64 00 54 00
b3 00 71 00 DC 0E 11



72 00 46 00 27 00 18 20 6c 00 50 00 33 00 20 20
43 00 e6 00 22 21 6f 00 07 00 21 20 7e 00 af 00
D9 00 6b 00 df 00 01 00 da 00 7e 00 22 21 1d 00
a4 00 15 00 5b 00 3a 20 e1 00 29 00 5e 00 A7 00
d2 00 1c 00 1c 20 18 20 f4 00 d4 00 a4 00 1c 00
75 00 f7 00 7e 00 5d 00 27 00 38 00 19 20 53 00
39 00 37 00 25 00 f1 00 42 00 7f 00 57 00 18 20
4b 00 27 00 3a 00 B8 00 62 00 b9 00 e3 00 1d 00
00 ab 00 ce 50 00 6e 00 55 00 21 20 20 00 52 00
0d 00 33 00 35 00 2d 00 11 00 78 01 69 00 7e 01
78 00 4f 00 7e 01 54 00 8F 00 F9 00 1b 00 c3 00
5c 00 a1 00 47 00 04 00 21 00 28 00 70 00 dc 02
20 00 d6 00 61 01 1a 20 21 20 ea 00 32 00 57 00
26 20 76 00 15 00 eb 00 03 00 21 00 27 00 0E 00
1d 20 B8 00 4f 00 44 00 69 00 42 00 76 00 5c 00
e8 00 1a 20 b1 00 18 20 fa 00 ee 00 7e 00 1c 00
21 20 e0 00 f0 00 bd 00 4e 00 0c 00 D8 00 A9 00
27 00 70 00 35 00 24 00 b5 00 59 00 b7 00 69 00
00 4e 00 ca ce 00 1f 00 6d 00 bf 00 31 00 3f 00
dc 00 f6 00 7c 00 57 00 2e 00 c4 00 18 00 5c 00
1a 00 c6 02 e8 00 6e 00 c1 00 1b 00 64 00 54 00
b3 00 71 00 DC 0E 12


===================================

Please, just quick reply from this announcement.

Regards, .A.PAL

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/