{"id":"https://openalex.org/W4417064199","doi":"https://doi.org/10.1007/s00145-025-09558-1","title":"Time-Space Tradeoffs for Sponge Hashing: Attacks and Limitations for Short Collisions","display_name":"Time-Space Tradeoffs for Sponge Hashing: Attacks and Limitations for Short Collisions","publication_year":2025,"publication_date":"2025-12-05","ids":{"openalex":"https://openalex.org/W4417064199","doi":"https://doi.org/10.1007/s00145-025-09558-1"},"language":"en","primary_location":{"id":"doi:10.1007/s00145-025-09558-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s00145-025-09558-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s00145-025-09558-1.pdf","source":{"id":"https://openalex.org/S190936789","display_name":"Journal of Cryptology","issn_l":"0933-2790","issn":["0933-2790","1432-1378"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s00145-025-09558-1.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033303891","display_name":"Cody Freitag","orcid":"https://orcid.org/0000-0002-6307-204X"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]},{"id":"https://openalex.org/I197251160","display_name":"Hebrew University of Jerusalem","ror":"https://ror.org/03qxff017","country_code":"IL","type":"education","lineage":["https://openalex.org/I197251160"]}],"countries":["IL","US"],"is_corresponding":false,"raw_author_name":"Cody Freitag","raw_affiliation_strings":["Northeastern University, Boston, United States","School of Computer Science and Engineering, Hebrew University of Jerusalem, 91904, Jerusalem, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, United States","institution_ids":["https://openalex.org/I12912129"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Hebrew University of Jerusalem, 91904, Jerusalem, Israel","institution_ids":["https://openalex.org/I197251160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023413821","display_name":"Ashrujit Ghoshal","orcid":"https://orcid.org/0000-0003-2436-0230"},"institutions":[{"id":"https://openalex.org/I24676775","display_name":"Indian Institute of Technology Madras","ror":"https://ror.org/03v0r5n49","country_code":"IN","type":"education","lineage":["https://openalex.org/I24676775"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Ashrujit Ghoshal","raw_affiliation_strings":["Indian Institute of Technology Madras, Chennai, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Madras, Chennai, India","institution_ids":["https://openalex.org/I24676775"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032483797","display_name":"Ilan Komargodski","orcid":"https://orcid.org/0000-0002-1647-2112"},"institutions":[{"id":"https://openalex.org/I197251160","display_name":"Hebrew University of Jerusalem","ror":"https://ror.org/03qxff017","country_code":"IL","type":"education","lineage":["https://openalex.org/I197251160"]}],"countries":["IL"],"is_corresponding":true,"raw_author_name":"Ilan Komargodski","raw_affiliation_strings":["School of Computer Science and Engineering, Hebrew University of Jerusalem, 91904, Jerusalem, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Hebrew University of Jerusalem, 91904, Jerusalem, Israel","institution_ids":["https://openalex.org/I197251160"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5032483797"],"corresponding_institution_ids":["https://openalex.org/I197251160"],"apc_list":{"value":2890,"currency":"USD","value_usd":2890},"apc_paid":{"value":2890,"currency":"USD","value_usd":2890},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.13892289,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"39","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.5112000107765198,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.5112000107765198,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.4262000024318695,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11269","display_name":"Algorithms and Data Compression","score":0.006800000090152025,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/permutation","display_name":"Permutation (music)","score":0.7039999961853027},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.6938999891281128},{"id":"https://openalex.org/keywords/collision-attack","display_name":"Collision attack","score":0.6470000147819519},{"id":"https://openalex.org/keywords/collision","display_name":"Collision","score":0.64410001039505},{"id":"https://openalex.org/keywords/random-permutation","display_name":"Random permutation","score":0.5879999995231628},{"id":"https://openalex.org/keywords/collision-resistance","display_name":"Collision resistance","score":0.5353000164031982}],"concepts":[{"id":"https://openalex.org/C21308566","wikidata":"https://www.wikidata.org/wiki/Q7169365","display_name":"Permutation (music)","level":2,"score":0.7039999961853027},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.6938999891281128},{"id":"https://openalex.org/C87538441","wikidata":"https://www.wikidata.org/wiki/Q389463","display_name":"Collision attack","level":5,"score":0.6470000147819519},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6460999846458435},{"id":"https://openalex.org/C121704057","wikidata":"https://www.wikidata.org/wiki/Q352070","display_name":"Collision","level":2,"score":0.64410001039505},{"id":"https://openalex.org/C200985842","wikidata":"https://www.wikidata.org/wiki/Q3375503","display_name":"Random permutation","level":3,"score":0.5879999995231628},{"id":"https://openalex.org/C150909736","wikidata":"https://www.wikidata.org/wiki/Q1779448","display_name":"Collision resistance","level":5,"score":0.5353000164031982},{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.46619999408721924},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4302000105381012},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.36980000138282776},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.32580000162124634},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3255999982357025},{"id":"https://openalex.org/C187062812","wikidata":"https://www.wikidata.org/wiki/Q6322840","display_name":"K-independent hashing","level":5,"score":0.32170000672340393},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.3181999921798706},{"id":"https://openalex.org/C88548561","wikidata":"https://www.wikidata.org/wiki/Q347599","display_name":"sort","level":2,"score":0.2632000148296356},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s00145-025-09558-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s00145-025-09558-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s00145-025-09558-1.pdf","source":{"id":"https://openalex.org/S190936789","display_name":"Journal of Cryptology","issn_l":"0933-2790","issn":["0933-2790","1432-1378"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s00145-025-09558-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s00145-025-09558-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s00145-025-09558-1.pdf","source":{"id":"https://openalex.org/S190936789","display_name":"Journal of Cryptology","issn_l":"0933-2790","issn":["0933-2790","1432-1378"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1732298351","display_name":null,"funder_award_id":"DGE-2139899","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6174244922","display_name":"Graduate Research Fellowship Program (GRFP)","funder_award_id":"2139899","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6278333904","display_name":null,"funder_award_id":"101162665","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G7361187543","display_name":null,"funder_award_id":"1774/20","funder_id":"https://openalex.org/F4320322252","funder_display_name":"Israel Science Foundation"},{"id":"https://openalex.org/G7557631692","display_name":null,"funder_award_id":"HR00110C0086","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320321950","display_name":"Hebrew University of Jerusalem","ror":"https://ror.org/03qxff017"},{"id":"https://openalex.org/F4320322252","display_name":"Israel Science Foundation","ror":"https://ror.org/04sazxf24"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320332815","display_name":"Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4417064199.pdf","grobid_xml":"https://content.openalex.org/works/W4417064199.grobid-xml"},"referenced_works_count":32,"referenced_works":["https://openalex.org/W1493969756","https://openalex.org/W1540076154","https://openalex.org/W1549671385","https://openalex.org/W1553650484","https://openalex.org/W1566345534","https://openalex.org/W1575640061","https://openalex.org/W1600255172","https://openalex.org/W1826530159","https://openalex.org/W1857473325","https://openalex.org/W1971070826","https://openalex.org/W1971282587","https://openalex.org/W2012646342","https://openalex.org/W2069919161","https://openalex.org/W2149929743","https://openalex.org/W2159460804","https://openalex.org/W2166980335","https://openalex.org/W2208284559","https://openalex.org/W2468012243","https://openalex.org/W2598805891","https://openalex.org/W2752198235","https://openalex.org/W2768238295","https://openalex.org/W2794492466","https://openalex.org/W2794798416","https://openalex.org/W2795012573","https://openalex.org/W2990000219","https://openalex.org/W3034230220","https://openalex.org/W3037531567","https://openalex.org/W3037871682","https://openalex.org/W4312639955","https://openalex.org/W4313125963","https://openalex.org/W4389011030","https://openalex.org/W4399522279"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Sponge":[1,32],"hashing":[2,11,30,33,72,351,376],"is":[3,34,172,178,343,352],"a":[4,48,75,114,201,206,231,237,367,386],"novel":[5,368],"alternative":[6],"to":[7,113],"the":[8,28,67,88,157,175,182,189,197,332,337,344,357,378],"popular":[9,19],"Merkle-Damg\u00e5rd":[10,361],"design.":[12],"The":[13],"sponge":[14,71,350,375],"construction":[15],"has":[16,241,404],"become":[17],"increasingly":[18],"in":[20,164,236,374],"various":[21],"applications,":[22],"perhaps":[23],"most":[24],"notably,":[25,228],"it":[26],"underlies":[27],"SHA-3":[29],"standard.":[31],"parametrized":[35],"by":[36,47,78,98],"two":[37],"numbers,":[38],"r":[39],"and":[40,43,46,225,240,377,403],"c":[41,116],"(bitrate":[42],"capacity,":[44],"respectively),":[45],"fixed-size":[49],"permutation":[50,77,90],"on":[51,188,366],"$$r+c$$":[52],"<mml:math":[53,127,211,253,313,395,411],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\">":[54,128,212,254,314,396],"<mml:mrow>":[55,129,213,255,259,265,274,281,315,397],"<mml:mi>r</mml:mi>":[56,150,295],"<mml:mo>+</mml:mo>":[57,142,287],"<mml:mi>c</mml:mi>":[58,140,276,324],"</mml:mrow>":[59,153,217,271,277,285,300,304,326,401],"</mml:math>":[60,154,218,305,327,402],"bits.":[61],"In":[62,306],"this":[63,342],"work,":[64],"we":[65,195,229],"study":[66,196],"collision":[68,162,177,204,239,372],"resistance":[69,163],"of":[70,167,184,191,199,309,339,360],"instantiated":[73],"with":[74,80,120],"random":[76,89,115],"adversaries":[79,107],"arbitrary":[81],"S":[82],"-bit":[83,117],"auxiliary":[84],"advice":[85],"input":[86],"about":[87],"that":[91,105,234,389],"make":[92],"T":[93,185],"online":[94],"queries.":[95],"Recent":[96],"work":[97],"Coretti":[99],"et":[100],"al.":[101],"(CRYPTO":[102],"\u201918)":[103],"showed":[104],"such":[106],"can":[108],"find":[109],"collisions":[110],"(with":[111],"respect":[112],"initialization":[118],"vector)":[119],"advantage":[121,242,405],"$$\\Theta":[122],"(ST^2/2^c":[123],"+":[124,249,408],"T^2/":[125],"2^{r})$$":[126],"<mml:mi>\u0398</mml:mi>":[130],"<mml:mo>(</mml:mo>":[131],"<mml:mi>S</mml:mi>":[132,267,316],"<mml:msup>":[133,138,143,148,262,266,272,289,293,317,322],"<mml:mi>T</mml:mi>":[134,144,270,290,318],"<mml:mn>2</mml:mn>":[135,139,145,149,268,273,275,282,291,294,319,323,400],"</mml:msup>":[136,141,146,151,269,278,286,292,296,320,325],"<mml:mo>/</mml:mo>":[137,147,283],"<mml:mo>)</mml:mo>":[152],".":[155,219,251],"Although":[156],"above":[158],"attack":[159,233,330,364,388],"formally":[160],"breaks":[161],"some":[165],"range":[166,308],"parameters,":[168],"its":[169],"practical":[170],"relevance":[171],"limited":[173],"since":[174],"resulting":[176],"very":[179],"long":[180],"(on":[181],"order":[183],"blocks).":[186],"Focusing":[187],"task":[190],"finding":[192,200,373],"short":[193],"collisions,":[194],"complexity":[198],"B":[202],"-block":[203],"for":[205,348,391],"given":[207],"parameter":[208],"$$B\\ge":[209,393],"1$$":[210],"<mml:mi>B</mml:mi>":[214,398],"<mml:mo>\u2265</mml:mo>":[215,399],"<mml:mn>1</mml:mn>":[216],"We":[220,383],"give":[221,230,385],"several":[222],"new":[223,232],"attacks":[224],"limitations.":[226],"Most":[227],"results":[235],"single-block":[238,371],"$$\\begin{aligned}":[243],"\\Omega":[244],"\\left(":[245,246],"\\frac{S^{2}T}{2^{2c}}\\right)":[247],"^{2/3}":[248],"\\frac{T^2}{2^r}\\right)":[250],"\\end{aligned}$$":[252],"<mml:mtable>":[256],"<mml:mtr>":[257],"<mml:mtd>":[258],"<mml:mi>\u03a9</mml:mi>":[260],"<mml:mfenced>":[261,263],"<mml:mfrac>":[264,288],"</mml:mfrac>":[279,297],"</mml:mfenced>":[280,298],"<mml:mn>3</mml:mn>":[284],"<mml:mo>.</mml:mo>":[299],"</mml:mtd>":[301],"</mml:mtr>":[302],"</mml:mtable>":[303],"certain":[307],"parameters":[310],"(e.g.,":[311],"$$ST^2&gt;2^c$$":[312],"<mml:mo>&gt;</mml:mo>":[321],"),":[328],"our":[329,340],"outperforms":[331],"previously-known":[333],"best":[334,338],"attack.":[335],"To":[336],"knowledge,":[341],"first":[345],"natural":[346],"application":[347],"which":[349],"provably":[353],"less":[354],"secure":[355],"than":[356],"corresponding":[358],"instance":[359],"hashing.":[362],"Our":[363],"relies":[365],"connection":[369],"between":[370],"well-studied":[379],"function":[380],"inversion":[381],"problem.":[382],"also":[384],"general":[387],"works":[390],"any":[392],"2$$":[394],"$$\\Omega":[406],"({STB}/{2^{c}}":[407],"{T^2}/{2^{\\min":[409],"\\{r,c\\}}})$$":[410],"xmlns:mml=\"http://www.w3.org/1998/Math/M":[412]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-12-05T00:00:00"}