Security Analysis of XHASH8/12

ePrint Report: Security Analysis of XHASH8/12

Léo Perrin

We have investigated both the padding scheme and the applicability of algebraic attacks to both XHash8 and XHash12. The only vulnerability of the padding scheme we can find is plausibly applicable only in the multi-rate setting---for which the authors make no claim---and is safe otherwise.


For algebraic attack relying on the computation and exploitation of a Gröbner basis, our survey of the literature suggests to base a security argument on the complexity …

analysis attack attacks authors can claim eprint report find padding rate report safe security security analysis vulnerability