摘要： 差分分析方法是攻击迭代密码最有效的方法之一，它可以用来攻击任何一个用轮函数迭代的方法构造的密码系统。为此，描述差分分析方法在Hash函数HAVAL-128算法中的应用，并给出选择消息差分、确定差分路径、推导保证差分路径成立的充分条件等方法，诠释了利用差分分析方法攻击Hash函数的理论依据及步骤。

关键词: Hash函数, HAVAL算法, 差分分析, 差分路径, 碰撞攻击

Abstract: Differential analysis is one of the most effective way to attack iterative code, it can be used to attack cryptographic system which is the iteration of a fixed round function. This paper describes the differential analysis which is used in Hash function HAVAL-128, and gives the method of choosing the messages difference, determining the path difference, deriving the sufficient conditions which ensure the establishment of differential path. It details the interpretation of the theoretical basis for using differential analysis.

Key words: Hash function, HAVAL algorithm, differential analysis, differential path, collision attack

中图分类号: 

• TN918.1