Practical Collision Attacks on 22- and 23-Step SM3 (Preliminary Version)
Preliminary IACR ePrint paper giving practical collision attacks on 22- and 23-step reduced SM3 with the standard initial value, at about 2^52.4 and 2^54.5 reduced-round evaluations. It extends the 20-step result of Mendel et al. (2013) by two and three steps. It also presents a semi-free-start collision for 24-step SM3. SM3 is the 256-bit hash in GB/T 32905-2016 and ISO/IEC 10118-3:2018.
TL;DR Presents practical collisions on 22- and 23-step SM3 and a 24-step semi-free-start collision, beating the 20-step record.
Technologies named here
- SM3
Standards and laws named here
- GB/T 32905-2016
- ISO/IEC 10118-3:2018
Techniques named here
- collision attack
- semi-free-start collision
Concepts named here
- Collision resistance
- Reduced-round hash cryptanalysis
Also named here
- Mendel et al.
Related in other

Rerandomizable Garbling for Arithmetic Circuits

