Cited by 209Cryptographic Implementations and SecurityCoding theory and cryptographyCryptography and Residue Arithmetic

Differential collisions in SHA-0

Open access
Chabaud, Florent, Joux, Antoine·1998·Lecture Notes in Computer Science

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1007/bfb0055720

Cites

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • AES with its wide-trail strategy was designed to withstand differential and linear cryptanalyses, so pure versions of these techniques have limited applications in attacks.

    “AES with its wide-trail strategy was designed to withstand differential and linear cryptanalyses [15], so pure versions of these techniques have limited applications in attacks.”

    From Biclique Cryptanalysis of the Full AES (2011) · cites this paper as [15]

    The Conclusion discusses a differential attack on SHA-0 and the expansion of SHA-1, not AES. Searches for AES, Rijndael, the wide-trail strategy, and resistance to differential and linear cryptanalysis found no passage addressing the attributed claim in our copy. (LLM, conf=0.77)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

No references could be resolved yet.

Research works printed but not linked: 1

  1. A. Canteaut, and F. Chabaud. A new algorithm for finding minimum-weight words in a linear code: Application to primitive narrow-sense BCH codes of length 511, IEEE Trans. Inform. Theory, IT-44(1), pp 367-378, Jan. 1998.

Cited by

Sorted by citations

Authors
Chabaud, F., & Joux, A.
Venue
Lecture Notes in Computer Science
Published
1998
Pages
56-71
ISSN
  • 0302-9743 (ISSN-L)
  • 1611-3349
OpenAlex
W2095675261
Cited by
209
References
0
Citations by year
2025: 2 · 2024: 2 · 2023: 3 · 2022: 7 · 2021: 3 · 2020: 5 · 2019: 2 · 2018: 4 · 2017: 3 · 2016: 5 · 2015: 7 · 2014: 9 · 2013: 10 · 2012: 12
FWCI
1.58
Type
conference paper
Language
en
Open access
Locations
Lecture notes in computer science (publishedVersion)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
  • Physical Sciences › Computer Science › Artificial Intelligence › Coding theory and cryptography
  • Physical Sciences › Computer Science › Information Systems › Cryptography and Residue Arithmetic
Keywords
SHA-1, collision attack, differential cryptanalysis, compression function, birthday paradox, cryptographic hash functions, block cipher

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review