Limited-birthday Distinguishers for Hash Functions - Collisions Beyond the Birthday Bound can be Meaningful.

摘要: … preimage attack for a compression function (also called pseudo-preimage attack) can be transformed into a preimage … on 38-round reduced SHA-256 compression function has been pro…