Secure 128-bit hash?


With the decline in MD5, is there an unbroken 128-bit hash left? One with no faster way to find a collision than birthday attack?

If not, why not take the Whirlpool design, namely Merkle-Damgard using Miyaguchi-Preneel hash compression with a wide-trail cipher, and shrink it to 128 bits by substituting AES/Rijndael for the Whirlpool block cipher? Define it as

m=input message
m_i, for i from 1 to n, is m padded with (a 1 bit, as many zero bits as necessary to get the length up to 64 modulo 128, and a 64-bit number of bits in m), broken up into n 128-bit blocks, where n is ceiling(number of bits in m + (1+64))/128)

H_0=128 zero bits
H_i=AES(H_(i-1), m_i) XOR H_(i-1) XOR m_i, for i from 1 to n, where AES(x,y) is the AES encryption of plaintext y using key x

Hash output is H_n.

--Mike Amling
.

Relevant Pages

  • Re: L1,L2 caches and MMU
    ... |> the hash function for zero or collisions, ... |> you get it to zero. ... the number of cache line accesses that is the real gain in my approach. ...
    (comp.arch)
  • Re: Secure 128-bit hash?
    ... with no faster way to find a collision than birthday attack? ... If not, why not take the Whirlpool design, namely Merkle-Damgard using Miyaguchi-Preneel hash compression with a wide-trail cipher, and shrink it to 128 bits by substituting AES/Rijndael for the Whirlpool block cipher? ... Did you find a suitable hash and please may I know which one it was? ...
    (sci.crypt)
  • Re: Hashing
    ... >> would then point to a simpler data structure such as a linked ... > better performance especially when the number of collisions is ... > as god as the bob jenkins hash and the buffer must be aligned, ... of 24 zero bytes, 48 zero bytes, 72 zero bytes, and so on, will all ...
    (alt.lang.asm)
  • Re: Waiting on background tasks
    ... Hash: SHA1 ... given, all currently active child processes are waited for, and the return ... status is zero." ...
    (Ubuntu)
  • Re: A different aproach to archiving files
    ... > In my last 'hash shootout' the Jenkins Hash by Bob Jenkins won. ... Twice as fast as md5, ... in input from producing zero as the hash value. ...
    (comp.os.linux.development.apps)