@inproceedings{1fd69207e193401fb53a56b732bc278b,
title = "Linear-XOR and Additive Checksums Don't Protect Damgard-Merkle Hashes",
abstract = "We consider the security of Damg\textbackslash{}aa\{\}rd-Merkle variants which compute linear-XOR or additive checksums over message blocks, intermediate hash values, or both, and process these checksums in computing the final hash value. We show that these Damg\textbackslash{}aa\{\}rd-Merkle variants gain almost no security against generic attacks such as the long-message second preimage attacks and the herding attack.",
keywords = "Damg{\aa}rd-Merkle construction, multicollisions, Linear-XOR and additive checksums, second preimage and herding attacks",
author = "Praveen Gauravaram and John Kelsey",
year = "2008",
language = "English",
isbn = "978-3-540-79262-8",
series = "Lecture Notes in Computer Science",
publisher = "Springer",
number = "4964",
pages = "36--51",
editor = "Tal Malkin",
booktitle = "RSA Conference 2008, Cryptographers' Track",
note = "RSA Conference Cryptographer's Track, CT-RSA ; Conference date: 01-01-2008",
}