Exploring Formal Methods for Cryptographic Hash Function Implementations

ePrint Report: Exploring Formal Methods for Cryptographic Hash Function Implementations

Nicky Mouha

Cryptographic hash functions are used inside many applications that critically rely on their resistance against cryptanalysis attacks and the correctness of their implementations. Nevertheless, vulnerabilities in cryptographic hash function implementations can remain unnoticed for more than a decade, as shown by the recent discovery of a buffer overflow in the implementation of SHA-3 in the eXtended Keccak Code Package (XKCP), impacting Python, PHP, and several other software projects. …

applications attacks buffer buffer overflow buffer overflow vulnerability code correctness cryptanalysis discovery eprint report function functions hash hash function hash functions overflow package php projects python report sha-3 software vulnerabilities vulnerability