I have a question regarding Xiaoyun Wang's paper "How to Break MD5 and
Other
Hash Functions" (Eurocrypt 2005).
When Mr. Wang talks about the conditions for the non-zero bits in Step
Eight
(pp7-8 where he gives an example of how to get a set of sufficient
conditions that ensure that
the differential characteristic holds) it says in 1. (a) iii that DELTA
c(2,1) equals 0. But the corresponding equation says
c'2=c2[7,8,9,10,11,-12,-24,-25,-26,27,28,29,30,31,32,1,2,3,4,5,-6]
I guess, I just don't really get it, but wouldn't that mean that c(2,1)=1
and c'(2,1)=0 and hence DELTA c(2,1)=1?
I would be very thankful, if anyone could help me, since no person I've
asked so far
could tell me what I probably misunderstand.
Thanks in advance!
Kind regards,
Dennis Komm
|
