-------- Original Message --------
Subject:    Re: Collisions for 3 and 4 rounds with n=160 and b=1600
Date:   Thu, 24 Nov 2011 00:40:24 +0100
From:   <itai dinur at weizmann ac il>
Reply-To:   <crunchy at noekeon org>
To:     <mjos at reveresecurity com>, <crunchy at noekeon org>
CC:     <orr dunkelman at weizmann ac il>, "Adi Shamir" <adi shamir at weizmann ac il>


Hi Markku,

Generating collisions for larger rates is of course easier.
I hope the attached colliding messages for r=1440 can be verified as well.

Regards,
Itai 

---------------------- keccak col160 (2).txt ----------------------
m1=

26254AFF 016DC6E9 694EB7F6 6463C572 8E0CC1C0 B852714C E08628E5 C9796790 55E4DDDA CAE39A79 11A01335 668FA750 E5C3B4FD 
7E226877 47024444 05111036 323F8F95 24995325 81EDFDE1 DA976AD2 494C7368 7DE7F1FE AB127A41 2377B6CF 15CB2B72 51F51114 
6F0603E4 681CC069 1D051047 28776D51 DCA11789 339CC819 7E7B5DC3 38D68B95 86AAD6D3 114C30EB C1841016 A2B0A9AC BC0F5A47 
703E7F92 D91FC837 515F4E47 BF14F84D 47C88067 81AA2B33

m2=

ACE3F06B 5817505B 8A5B5DD3 D1116BD9 4AE4BC08 67063F8E 3E055F3C A887F915 BA1F21EE 1DAD7F2B BD037053 CA9FA662 7C153D08 
808695A6 19AF7DC0 BDAA0723 4775AFE0 5D45ADF2 483C2E77 4BD36187 12C355ED FA66DCAF AFFCD001 3B1C7DC8 2C712A3D F8B234C4 
267C5E37 84B9F771 D03901DF 97386CB4 05521A5C 2C624599 628D93C7 2FB95FA5 BB791D7F 31E34DBF 666F0336 30E331F9 9046F841 
41D7D531 604F8831 F66B1831 AB32BC27 653074DB 81C3A95C

Output 3 rounds=

38A76438 29D696F5 172050AC 2871D9EE 838AA5D7

Output 4 rounds=

74A6467F 6CF954E2 616555FD 2C412DEA D98840C8
--------------------------------------------



-------- Original Message --------
Subject:    Re: Collisions for 3 and 4 rounds with n=160 and b=1600
Date:   Thu, 24 Nov 2011 13:19:14 +0100
From:   The Keccak Team <keccak at noekeon org>
Reply-To:   <crunchy at noekeon org>
To:     Itai Dinur <itai dinur at weizmann ac il>, Orr Dunkelman <orr dunkelman at weizmann ac il>, Adi Shamir <adi shamir at weizmann ac il>
CC:     <crunchy at noekeon org>


Dear Itai, Orr and Adi,

Thank you for submitting your collisions! We checked those in the file
"keccak col160 (2).txt" and confirm they are indeed correct.

Thanks also to Markku for independently checking them.

Should others wish to check or play with them, the following piece of code
can be added to KeccakTools' KeccakCrunchyContest.cpp file (and similarly
for 3 rounds).

Kind regards,
The Keccak Team

    counter += verifyCollisionChallenge(
        // Keccak[r=1440, c=160, rounds=4]: collision challenge found by
Itai Dinur, Orr Dunkelman and Adi Shamir
        1440, 160, 4,
        (const UINT8*)"\xff\x4a\x25\x26\xe9\xc6\x6d\x01\xf6\xb7\x4e\x69"
        "\x72\xc5\x63\x64\xc0\xc1\x0c\x8e\x4c\x71\x52\xb8\xe5\x28\x86"
        "\xe0\x90\x67\x79\xc9\xda\xdd\xe4\x55\x79\x9a\xe3\xca\x35\x13"
        "\xa0\x11\x50\xa7\x8f\x66\xfd\xb4\xc3\xe5\x77\x68\x22\x7e\x44"
        "\x44\x02\x47\x36\x10\x11\x05\x95\x8f\x3f\x32\x25\x53\x99\x24"
        "\xe1\xfd\xed\x81\xd2\x6a\x97\xda\x68\x73\x4c\x49\xfe\xf1\xe7"
        "\x7d\x41\x7a\x12\xab\xcf\xb6\x77\x23\x72\x2b\xcb\x15\x14\x11"
        "\xf5\x51\xe4\x03\x06\x6f\x69\xc0\x1c\x68\x47\x10\x05\x1d\x51"
        "\x6d\x77\x28\x89\x17\xa1\xdc\x19\xc8\x9c\x33\xc3\x5d\x7b\x7e"
        "\x95\x8b\xd6\x38\xd3\xd6\xaa\x86\xeb\x30\x4c\x11\x16\x10\x84"
        "\xc1\xac\xa9\xb0\xa2\x47\x5a\x0f\xbc\x92\x7f\x3e\x70\x37\xc8"
        "\x1f\xd9\x47\x4e\x5f\x51\x4d\xf8\x14\xbf\x67\x80\xc8\x47\x33"
        "\x2b\xaa", 1432,
        (const UINT8*)"\x6b\xf0\xe3\xac\x5b\x50\x17\x58\xd3\x5d\x5b\x8a"
        "\xd9\x6b\x11\xd1\x08\xbc\xe4\x4a\x8e\x3f\x06\x67\x3c\x5f\x05"
        "\x3e\x15\xf9\x87\xa8\xee\x21\x1f\xba\x2b\x7f\xad\x1d\x53\x70"
        "\x03\xbd\x62\xa6\x9f\xca\x08\x3d\x15\x7c\xa6\x95\x86\x80\xc0"
        "\x7d\xaf\x19\x23\x07\xaa\xbd\xe0\xaf\x75\x47\xf2\xad\x45\x5d"
        "\x77\x2e\x3c\x48\x87\x61\xd3\x4b\xed\x55\xc3\x12\xaf\xdc\x66"
        "\xfa\x01\xd0\xfc\xaf\xc8\x7d\x1c\x3b\x3d\x2a\x71\x2c\xc4\x34"
        "\xb2\xf8\x37\x5e\x7c\x26\x71\xf7\xb9\x84\xdf\x01\x39\xd0\xb4"
        "\x6c\x38\x97\x5c\x1a\x52\x05\x99\x45\x62\x2c\xc7\x93\x8d\x62"
        "\xa5\x5f\xb9\x2f\x7f\x1d\x79\xbb\xbf\x4d\xe3\x31\x36\x03\x6f"
        "\x66\xf9\x31\xe3\x30\x41\xf8\x46\x90\x31\xd5\xd7\x41\x31\x88"
        "\x4f\x60\x31\x18\x6b\xf6\x27\xbc\x32\xab\xdb\x74\x30\x65\x5c"
        "\xa9\xc3", 1432
     );