SlideShare a Scribd company logo
4
Most read
5
Most read
6
Most read
Secure Hash Algorithm-512
(SHA-512)
Course Code: CSE-6304
Course Id: Network Security
Presented To Presented By
Mr. Md. Shohidul Islam Md. Shariful Islam
Assistant Professor Student id: 142419-P
Department of CSE, DUET Session: 2014-15
1
April 5, 2016
Outlines
 SHA-512 overview
 processing of SHA-521
 word expansion
 compression function
 round function
 additive constants
 example using SHA-512
 applications
 cryptanalysis
2April 5, 2016
Overview
 developed by National Institute of Standards and
Technology
 member of SHA-2 family
 latest version of Secure Hash Algorithm
 based on the Merkle-Damgard scheme
 maximum message size 2128-1 bits
 block size 1024 bits
 message digest size 512 bits
 number of rounds 80
 word size 64 bits
3April 5, 2016
Figure: SHA-512 Processing of a Single 1024-Bit Block 4
Processing of SHA-512
Message block and digest word
5April 5, 2016
Figure: Padding and length field
Figure: A message block and the digest as words
Processing of SHA-512
 appending padding and fixed 128 bit length field
 dividing the augmented message into blocks
 using a 64-bit word derived from the current message
block
 using 8 constants based on square root of first 8 prime
numbers (2-19)
 updating a 512-bit buffer
 using a round constant based on cube root of first 80
prime numbers (2-409)
6April 5, 2016
Message block and digest word
7April 5, 2016
 operates on words
 each block consists of sixteen 64 bits(1024 bits)
words
 message digest has eight 64 bits (512 bits) words
named A,B,C,D,E,F,G,H
 expanding 80 words from sixteen 64 bits words
Figure: Word expansion in SHA-512 8
SHA-512 Initial Values & Word Expansion
Table : Values of constants in message digest initialization of SHA-512
Buffer Value (in Hexadecimal) Buffer Value (in Hexadecimal)
A0 6A09E667F3BCC908 E0 510E527FADE682D1
B0 BB67AE8584CAA73B F0 9B05688C2B3E6C1F
C0 3C6EF372FE94F82B G0 1F83D9ABFB41BD6B
D0 A54FF53A5F1D36F1 H0 5BE0CD19137E2179
Calculation of constants
9April 5, 2016
For example,
The 8th prime is 19, with the square root (19)1/2=
4.35889894354 Converting this number to binary with only 64
bits in the fraction part, we get,
The fraction part ∶ (5𝐵𝐸0𝐶𝐷19137𝐸2179)16
The 80th prime is 409, with the cubic root (409)1/3 =
7.42291412044. Converting this number to binary with only 64
bits in the fraction part, we get
The fraction part: (6C44198C4A475817)16
(100.0101 1011 1110 …1001)2 (4.5𝐵𝐸0𝐶𝐷19137𝐸2179)16
Figure: Compression Function in SHA-512 10
SHA-512 Compression Function
Figure: List of round constants used in SHA-512
11
SHA-512 Round constants (K)
Figure: Structure of each round in SHA-512 12
SHA-512 Round Function
13
SHA-512 Round Function
Majority Function
Conditional Function
Rotate Functions
April 5, 2016
14
SHA-512 Majority Function calculation
 We apply the Majority function on buffers A, B, and C. If
the leftmost hexadecimal digits of these buffers are 0x7,
0xA, and 0xE, respectively, what is the leftmost digit of
the result?
Solution
The digits in binary are 0111, 1010, and 1110.
a. The first bits are 0, 1, and 1. The majority is 1.
b. The second bits are 1, 0, and 1. The majority is 1.
c. The third bits are 1, 1, and 1. The majority is 1.
d. The fourth bits are 1, 0, and 0. The majority is 0.
The result is 1110, or 0xE in hexadecimal.
April 5, 2016
15
SHA-512 Conditional Function calculation
 We apply the Conditional function on E, F, and G
buffers. If the leftmost hexadecimal digits of these
buffers are 0x9, 0xA, and 0xF respectively, what is the
leftmost digit of the result?
Solution
The digits in binary are 1001, 1010, and 1111.
a. The first bits are 1, 1,and 1.The result is F1, which is 1.
b. The second bits are 0,0, and 1. The result is G2, which
is 1.
c. The third bits are 0,1,and 1.The result is G3, which is 1.
d. The fourth bits are 1,0,and 1.The result is F4, which is 0.
The result is 1110, or 0xE in hexadecimal.
April 5, 2016
16
Example using SHA-512
ASCII characters: “abc”, which is equivalent to the following 24-bit binary string:
01100001 01100010 01100011 = 616263 in Hexadecimal
The original length is 24 bits, or a hexadecimal value of 18.
the 1024-bit message block, in hexadecimal, is
6162638000000000 0000000000000000 0000000000000000 0000000000000000
0000000000000000 0000000000000000 0000000000000000 0000000000000000
0000000000000000 0000000000000000 0000000000000000 0000000000000000
0000000000000000 0000000000000000 0000000000000000 0000000000000018
W0 = 6162638000000000 W5 = 0000000000000000
W1 = 0000000000000000 W6 = 0000000000000000
W2 = 0000000000000000 W7 = 0000000000000000
W3 = 0000000000000000 W8 = 0000000000000000
W4 = 0000000000000000 W9 = 0000000000000000
W10 = 0000000000000000 W13 = 0000000000000000
W11 = 0000000000000000 W14 = 0000000000000000
W12 = 0000000000000000 W15 = 0000000000000018
April 5, 2016
The following table shows the initial values of these variables and their values after
each of the first two rounds.
The process continues through 80 rounds. The output of the final round is
73a54f399fa4b1b2 10d9c4c4295599f6 d67806db8b148677 654ef9abec389ca9
d08446aa79693ed7 9bb4d39778c07f9e 25c96a7768fb2aa3 ceb9fc3691ce8326
17
Example using SHA-512
a 6a09e667f3bcc908 f6afceb8bcfcddf5 1320f8c9fb872cc0
b bb67ae8584caa73b 6a09e667f3bcc908 f6afceb8bcfcddf5
c 3c6ef372fe94f82b bb67ae8584caa73b 6a09e667f3bcc908
d a54ff53a5f1d36f1 3c6ef372fe94f82b bb67ae8584caa73b
e 510e527fade682d1 58cb02347ab51f91 c3d4ebfd48650ffa
f 9b05688c2b3e6c1f 510e527fade682d1 58cb02347ab51f91
g 1f83d9abfb41bd6b 9b05688c2b3e6c1f 510e527fade682d1
h 5be0cd19137e2179 1f83d9abfb41bd6b 9b05688c2b3e6c1f
18
Example using SHA-512
The hash value is then calculated as
H1,7 = 5be0cd19137e2179 + ceb9fc3691ce8326 = 2a9ac94fa54ca49f
H1,6 = 1f83d9abfb41bd6b + 25c96a7768fb2aa3 = 454d4423643ce80e
H1,5 = 9b05688c2b3e6c1f + 9bb4d39778c07f9e = 36ba3c23a3feebbd
H1,4 = 510e527fade682d1 + d08446aa79693ed7 = 2192992a274fc1a8
H1,3 = a54ff53a5f1d36f1 + 654ef9abec389ca9 = 0a9eeee64b55d39a
H1,2 = 3c6ef372fe94f82b + d67806db8b148677 = 12e6fa4e89a97ea2
H1,1 = bb67ae8584caa73b + 10d9c4c4295599f6 = cc417349ae204131
H1,0 = 6a09e667f3bcc908 + 73a54f399fa4b1b2 = ddaf35a193617aba
The resulting 512-bit message digest is
ddaf35a193617aba cc417349ae204131 12e6fa4e89a97ea2 0a9eeee64b55d39a
2192992a274fc1a8 36ba3c23a3feebbd 454d4423643ce80e 2a9ac94fa54ca49f
19
SHA-512 Applications
 Used as part of a system to authenticate archival
video from the International Criminal Tribunal of the
Rwandan genocide.
 Proposed for use in DNSSEC
 are moving to 512-bit SHA-2 for secure password
hashing by Unix and Linux vendors
20
SHA-512 Cryptanalysis
Published in Year Attack method Rounds
New Collision Attacks Against
Up To 24-step SHA-2
2008 Deterministic 24/80
Preimages for step-reduced
SHA-2
2009
Meet-in-the-
middle
42/80
46/80
Advanced meet-in-the-middle
preimage attacks
2010
Meet-in-the-
middle
42/80
Bicliques for Preimages: Attacks
on
Skein-512 and the SHA-2 family
2011 Biclique
50/80
57/80
Branching Heuristics in
Differential Collision Search with
Applications to SHA-512
2014
Heuristic
differential
38/80
Thanks All
21April 5, 2016
Question,
comment,
Advice
22April 5, 2016
Ad

Recommended

SHA- Secure hashing algorithm
SHA- Secure hashing algorithm
Ruchi Maurya
 
Secure Hash Algorithm
Secure Hash Algorithm
Vishakha Agarwal
 
MD5 ALGORITHM.pptx
MD5 ALGORITHM.pptx
Rajapriya82
 
Hash Function
Hash Function
ssuserdfb2da
 
Message digest 5
Message digest 5
Tirthika Bandi
 
SHA 1 Algorithm
SHA 1 Algorithm
Shiva RamDam
 
Sha
Sha
ha123
 
unit 4.pptx of hash function in cryptography
unit 4.pptx of hash function in cryptography
NithyasriA2
 
DES
DES
Naga Srimanyu Timmaraju
 
Block Cipher and its Design Principles
Block Cipher and its Design Principles
SHUBHA CHATURVEDI
 
S/MIME
S/MIME
maria azam
 
Message Authentication Code & HMAC
Message Authentication Code & HMAC
Krishna Gehlot
 
Modern Block Cipher- Modern Symmetric-Key Cipher
Modern Block Cipher- Modern Symmetric-Key Cipher
Mahbubur Rahman
 
Classical encryption techniques
Classical encryption techniques
Dr.Florence Dayana
 
Block cipher modes of operation
Block cipher modes of operation
harshit chavda
 
Pgp pretty good privacy
Pgp pretty good privacy
Pawan Arya
 
DES (Data Encryption Standard) pressentation
DES (Data Encryption Standard) pressentation
sarhadisoftengg
 
RSA ALGORITHM
RSA ALGORITHM
Dr. Shashank Shetty
 
Key management
Key management
Sujata Regoti
 
block ciphers
block ciphers
Asad Ali
 
Message authentication
Message authentication
CAS
 
Cryptography & Network Security
Cryptography & Network Security
Fahad Shaikh
 
Substitution techniques
Substitution techniques
vinitha96
 
Rotor machine,subsitution technique
Rotor machine,subsitution technique
kirupasuchi1996
 
Diffie hellman key exchange algorithm
Diffie hellman key exchange algorithm
Sunita Kharayat
 
Public Key Cryptography
Public Key Cryptography
Gopal Sakarkar
 
Polyalphabetic Substitution Cipher
Polyalphabetic Substitution Cipher
SHUBHA CHATURVEDI
 
Hash Function
Hash Function
Siddharth Srivastava
 
SHA512.pptx
SHA512.pptx
ssuserb4287c
 
Chapter 7-Hash-Function in Cryptography.ppt
Chapter 7-Hash-Function in Cryptography.ppt
KrishnenduRarhi
 

More Related Content

What's hot (20)

DES
DES
Naga Srimanyu Timmaraju
 
Block Cipher and its Design Principles
Block Cipher and its Design Principles
SHUBHA CHATURVEDI
 
S/MIME
S/MIME
maria azam
 
Message Authentication Code & HMAC
Message Authentication Code & HMAC
Krishna Gehlot
 
Modern Block Cipher- Modern Symmetric-Key Cipher
Modern Block Cipher- Modern Symmetric-Key Cipher
Mahbubur Rahman
 
Classical encryption techniques
Classical encryption techniques
Dr.Florence Dayana
 
Block cipher modes of operation
Block cipher modes of operation
harshit chavda
 
Pgp pretty good privacy
Pgp pretty good privacy
Pawan Arya
 
DES (Data Encryption Standard) pressentation
DES (Data Encryption Standard) pressentation
sarhadisoftengg
 
RSA ALGORITHM
RSA ALGORITHM
Dr. Shashank Shetty
 
Key management
Key management
Sujata Regoti
 
block ciphers
block ciphers
Asad Ali
 
Message authentication
Message authentication
CAS
 
Cryptography & Network Security
Cryptography & Network Security
Fahad Shaikh
 
Substitution techniques
Substitution techniques
vinitha96
 
Rotor machine,subsitution technique
Rotor machine,subsitution technique
kirupasuchi1996
 
Diffie hellman key exchange algorithm
Diffie hellman key exchange algorithm
Sunita Kharayat
 
Public Key Cryptography
Public Key Cryptography
Gopal Sakarkar
 
Polyalphabetic Substitution Cipher
Polyalphabetic Substitution Cipher
SHUBHA CHATURVEDI
 
Hash Function
Hash Function
Siddharth Srivastava
 
Block Cipher and its Design Principles
Block Cipher and its Design Principles
SHUBHA CHATURVEDI
 
Message Authentication Code & HMAC
Message Authentication Code & HMAC
Krishna Gehlot
 
Modern Block Cipher- Modern Symmetric-Key Cipher
Modern Block Cipher- Modern Symmetric-Key Cipher
Mahbubur Rahman
 
Classical encryption techniques
Classical encryption techniques
Dr.Florence Dayana
 
Block cipher modes of operation
Block cipher modes of operation
harshit chavda
 
Pgp pretty good privacy
Pgp pretty good privacy
Pawan Arya
 
DES (Data Encryption Standard) pressentation
DES (Data Encryption Standard) pressentation
sarhadisoftengg
 
block ciphers
block ciphers
Asad Ali
 
Message authentication
Message authentication
CAS
 
Cryptography & Network Security
Cryptography & Network Security
Fahad Shaikh
 
Substitution techniques
Substitution techniques
vinitha96
 
Rotor machine,subsitution technique
Rotor machine,subsitution technique
kirupasuchi1996
 
Diffie hellman key exchange algorithm
Diffie hellman key exchange algorithm
Sunita Kharayat
 
Public Key Cryptography
Public Key Cryptography
Gopal Sakarkar
 
Polyalphabetic Substitution Cipher
Polyalphabetic Substitution Cipher
SHUBHA CHATURVEDI
 

Similar to Secure Hash Algorithm (SHA-512) (20)

SHA512.pptx
SHA512.pptx
ssuserb4287c
 
Chapter 7-Hash-Function in Cryptography.ppt
Chapter 7-Hash-Function in Cryptography.ppt
KrishnenduRarhi
 
crypto secure-hash-algorithm-versions.ppt
crypto secure-hash-algorithm-versions.ppt
shuchiagarwal12
 
Secure Hash Algorithm (SHA 256) - Detailed Architecture
Secure Hash Algorithm (SHA 256) - Detailed Architecture
SaravananPalani22
 
Message Digest message digest ppttsx.pptx
Message Digest message digest ppttsx.pptx
LaxmipujaBiradar
 
Cryptography-Hash-Functions.pptx
Cryptography-Hash-Functions.pptx
AngeloChangcoco
 
Information and network security 39 secure hash algorithm
Information and network security 39 secure hash algorithm
Vaibhav Khanna
 
Analysis and Evolution of SHA-1 Algorithm - Analytical Technique
Analysis and Evolution of SHA-1 Algorithm - Analytical Technique
IJCNCJournal
 
Analysis and Evolution of SHA-1 Algorithm - Analytical Technique
Analysis and Evolution of SHA-1 Algorithm - Analytical Technique
IJCNCJournal
 
27-SHA1.ppt
27-SHA1.ppt
PranjalSinha23
 
Hash Function & Analysis
Hash Function & Analysis
Pawandeep Kaur
 
Data streaming algorithms
Data streaming algorithms
Hridyesh Bisht
 
IRJET- Low Power and Simple Implementation of Secure Hashing Algorithm (SHA-2...
IRJET- Low Power and Simple Implementation of Secure Hashing Algorithm (SHA-2...
IRJET Journal
 
Hash Functions - Uses, Requirements, Secure Hash Algorithm
Hash Functions - Uses, Requirements, Secure Hash Algorithm
GoldenMIT
 
Secure hashing algorithm
Secure hashing algorithm
Karteek Paruchuri
 
lecture13.pdf
lecture13.pdf
AlaaElhaddad3
 
Hashfunction
Hashfunction
Fraboni Ec
 
Hashfunction
Hashfunction
Luis Goldster
 
Hashfunction
Hashfunction
James Wong
 
Hashfunction
Hashfunction
Tony Nguyen
 
Chapter 7-Hash-Function in Cryptography.ppt
Chapter 7-Hash-Function in Cryptography.ppt
KrishnenduRarhi
 
crypto secure-hash-algorithm-versions.ppt
crypto secure-hash-algorithm-versions.ppt
shuchiagarwal12
 
Secure Hash Algorithm (SHA 256) - Detailed Architecture
Secure Hash Algorithm (SHA 256) - Detailed Architecture
SaravananPalani22
 
Message Digest message digest ppttsx.pptx
Message Digest message digest ppttsx.pptx
LaxmipujaBiradar
 
Cryptography-Hash-Functions.pptx
Cryptography-Hash-Functions.pptx
AngeloChangcoco
 
Information and network security 39 secure hash algorithm
Information and network security 39 secure hash algorithm
Vaibhav Khanna
 
Analysis and Evolution of SHA-1 Algorithm - Analytical Technique
Analysis and Evolution of SHA-1 Algorithm - Analytical Technique
IJCNCJournal
 
Analysis and Evolution of SHA-1 Algorithm - Analytical Technique
Analysis and Evolution of SHA-1 Algorithm - Analytical Technique
IJCNCJournal
 
Hash Function & Analysis
Hash Function & Analysis
Pawandeep Kaur
 
Data streaming algorithms
Data streaming algorithms
Hridyesh Bisht
 
IRJET- Low Power and Simple Implementation of Secure Hashing Algorithm (SHA-2...
IRJET- Low Power and Simple Implementation of Secure Hashing Algorithm (SHA-2...
IRJET Journal
 
Hash Functions - Uses, Requirements, Secure Hash Algorithm
Hash Functions - Uses, Requirements, Secure Hash Algorithm
GoldenMIT
 
Ad

Recently uploaded (20)

Introduction to Natural Language Processing - Stages in NLP Pipeline, Challen...
Introduction to Natural Language Processing - Stages in NLP Pipeline, Challen...
resming1
 
Microwatt: Open Tiny Core, Big Possibilities
Microwatt: Open Tiny Core, Big Possibilities
IBM
 
Rapid Prototyping for XR: Lecture 4 - High Level Prototyping.
Rapid Prototyping for XR: Lecture 4 - High Level Prototyping.
Mark Billinghurst
 
How to Un-Obsolete Your Legacy Keypad Design
How to Un-Obsolete Your Legacy Keypad Design
Epec Engineered Technologies
 
May 2025: Top 10 Read Articles in Data Mining & Knowledge Management Process
May 2025: Top 10 Read Articles in Data Mining & Knowledge Management Process
IJDKP
 
FUNDAMENTALS OF COMPUTER ORGANIZATION AND ARCHITECTURE
FUNDAMENTALS OF COMPUTER ORGANIZATION AND ARCHITECTURE
Shabista Imam
 
Deep Learning for Natural Language Processing_FDP on 16 June 2025 MITS.pptx
Deep Learning for Natural Language Processing_FDP on 16 June 2025 MITS.pptx
resming1
 
دراسة حاله لقرية تقع في جنوب غرب السودان
دراسة حاله لقرية تقع في جنوب غرب السودان
محمد قصص فتوتة
 
Rapid Prototyping for XR: Lecture 1 Introduction to Prototyping
Rapid Prototyping for XR: Lecture 1 Introduction to Prototyping
Mark Billinghurst
 
Deep Learning for Image Processing on 16 June 2025 MITS.pptx
Deep Learning for Image Processing on 16 June 2025 MITS.pptx
resming1
 
Generative AI & Scientific Research : Catalyst for Innovation, Ethics & Impact
Generative AI & Scientific Research : Catalyst for Innovation, Ethics & Impact
AlqualsaDIResearchGr
 
Industrial internet of things IOT Week-3.pptx
Industrial internet of things IOT Week-3.pptx
KNaveenKumarECE
 
Structured Programming with C++ :: Kjell Backman
Structured Programming with C++ :: Kjell Backman
Shabista Imam
 
retina_biometrics ruet rajshahi bangdesh.pptx
retina_biometrics ruet rajshahi bangdesh.pptx
MdRakibulIslam697135
 
Rapid Prototyping for XR: Lecture 2 - Low Fidelity Prototyping.
Rapid Prototyping for XR: Lecture 2 - Low Fidelity Prototyping.
Mark Billinghurst
 
Modern multi-proposer consensus implementations
Modern multi-proposer consensus implementations
François Garillot
 
Introduction to Python Programming Language
Introduction to Python Programming Language
merlinjohnsy
 
Rapid Prototyping for XR: Lecture 5 - Cross Platform Development
Rapid Prototyping for XR: Lecture 5 - Cross Platform Development
Mark Billinghurst
 
System design handwritten notes guidance
System design handwritten notes guidance
Shabista Imam
 
International Journal of Advanced Information Technology (IJAIT)
International Journal of Advanced Information Technology (IJAIT)
ijait
 
Introduction to Natural Language Processing - Stages in NLP Pipeline, Challen...
Introduction to Natural Language Processing - Stages in NLP Pipeline, Challen...
resming1
 
Microwatt: Open Tiny Core, Big Possibilities
Microwatt: Open Tiny Core, Big Possibilities
IBM
 
Rapid Prototyping for XR: Lecture 4 - High Level Prototyping.
Rapid Prototyping for XR: Lecture 4 - High Level Prototyping.
Mark Billinghurst
 
May 2025: Top 10 Read Articles in Data Mining & Knowledge Management Process
May 2025: Top 10 Read Articles in Data Mining & Knowledge Management Process
IJDKP
 
FUNDAMENTALS OF COMPUTER ORGANIZATION AND ARCHITECTURE
FUNDAMENTALS OF COMPUTER ORGANIZATION AND ARCHITECTURE
Shabista Imam
 
Deep Learning for Natural Language Processing_FDP on 16 June 2025 MITS.pptx
Deep Learning for Natural Language Processing_FDP on 16 June 2025 MITS.pptx
resming1
 
دراسة حاله لقرية تقع في جنوب غرب السودان
دراسة حاله لقرية تقع في جنوب غرب السودان
محمد قصص فتوتة
 
Rapid Prototyping for XR: Lecture 1 Introduction to Prototyping
Rapid Prototyping for XR: Lecture 1 Introduction to Prototyping
Mark Billinghurst
 
Deep Learning for Image Processing on 16 June 2025 MITS.pptx
Deep Learning for Image Processing on 16 June 2025 MITS.pptx
resming1
 
Generative AI & Scientific Research : Catalyst for Innovation, Ethics & Impact
Generative AI & Scientific Research : Catalyst for Innovation, Ethics & Impact
AlqualsaDIResearchGr
 
Industrial internet of things IOT Week-3.pptx
Industrial internet of things IOT Week-3.pptx
KNaveenKumarECE
 
Structured Programming with C++ :: Kjell Backman
Structured Programming with C++ :: Kjell Backman
Shabista Imam
 
retina_biometrics ruet rajshahi bangdesh.pptx
retina_biometrics ruet rajshahi bangdesh.pptx
MdRakibulIslam697135
 
Rapid Prototyping for XR: Lecture 2 - Low Fidelity Prototyping.
Rapid Prototyping for XR: Lecture 2 - Low Fidelity Prototyping.
Mark Billinghurst
 
Modern multi-proposer consensus implementations
Modern multi-proposer consensus implementations
François Garillot
 
Introduction to Python Programming Language
Introduction to Python Programming Language
merlinjohnsy
 
Rapid Prototyping for XR: Lecture 5 - Cross Platform Development
Rapid Prototyping for XR: Lecture 5 - Cross Platform Development
Mark Billinghurst
 
System design handwritten notes guidance
System design handwritten notes guidance
Shabista Imam
 
International Journal of Advanced Information Technology (IJAIT)
International Journal of Advanced Information Technology (IJAIT)
ijait
 
Ad

Secure Hash Algorithm (SHA-512)

  • 1. Secure Hash Algorithm-512 (SHA-512) Course Code: CSE-6304 Course Id: Network Security Presented To Presented By Mr. Md. Shohidul Islam Md. Shariful Islam Assistant Professor Student id: 142419-P Department of CSE, DUET Session: 2014-15 1 April 5, 2016
  • 2. Outlines  SHA-512 overview  processing of SHA-521  word expansion  compression function  round function  additive constants  example using SHA-512  applications  cryptanalysis 2April 5, 2016
  • 3. Overview  developed by National Institute of Standards and Technology  member of SHA-2 family  latest version of Secure Hash Algorithm  based on the Merkle-Damgard scheme  maximum message size 2128-1 bits  block size 1024 bits  message digest size 512 bits  number of rounds 80  word size 64 bits 3April 5, 2016
  • 4. Figure: SHA-512 Processing of a Single 1024-Bit Block 4 Processing of SHA-512
  • 5. Message block and digest word 5April 5, 2016 Figure: Padding and length field Figure: A message block and the digest as words
  • 6. Processing of SHA-512  appending padding and fixed 128 bit length field  dividing the augmented message into blocks  using a 64-bit word derived from the current message block  using 8 constants based on square root of first 8 prime numbers (2-19)  updating a 512-bit buffer  using a round constant based on cube root of first 80 prime numbers (2-409) 6April 5, 2016
  • 7. Message block and digest word 7April 5, 2016  operates on words  each block consists of sixteen 64 bits(1024 bits) words  message digest has eight 64 bits (512 bits) words named A,B,C,D,E,F,G,H  expanding 80 words from sixteen 64 bits words
  • 8. Figure: Word expansion in SHA-512 8 SHA-512 Initial Values & Word Expansion Table : Values of constants in message digest initialization of SHA-512 Buffer Value (in Hexadecimal) Buffer Value (in Hexadecimal) A0 6A09E667F3BCC908 E0 510E527FADE682D1 B0 BB67AE8584CAA73B F0 9B05688C2B3E6C1F C0 3C6EF372FE94F82B G0 1F83D9ABFB41BD6B D0 A54FF53A5F1D36F1 H0 5BE0CD19137E2179
  • 9. Calculation of constants 9April 5, 2016 For example, The 8th prime is 19, with the square root (19)1/2= 4.35889894354 Converting this number to binary with only 64 bits in the fraction part, we get, The fraction part ∶ (5𝐵𝐸0𝐶𝐷19137𝐸2179)16 The 80th prime is 409, with the cubic root (409)1/3 = 7.42291412044. Converting this number to binary with only 64 bits in the fraction part, we get The fraction part: (6C44198C4A475817)16 (100.0101 1011 1110 …1001)2 (4.5𝐵𝐸0𝐶𝐷19137𝐸2179)16
  • 10. Figure: Compression Function in SHA-512 10 SHA-512 Compression Function
  • 11. Figure: List of round constants used in SHA-512 11 SHA-512 Round constants (K)
  • 12. Figure: Structure of each round in SHA-512 12 SHA-512 Round Function
  • 13. 13 SHA-512 Round Function Majority Function Conditional Function Rotate Functions April 5, 2016
  • 14. 14 SHA-512 Majority Function calculation  We apply the Majority function on buffers A, B, and C. If the leftmost hexadecimal digits of these buffers are 0x7, 0xA, and 0xE, respectively, what is the leftmost digit of the result? Solution The digits in binary are 0111, 1010, and 1110. a. The first bits are 0, 1, and 1. The majority is 1. b. The second bits are 1, 0, and 1. The majority is 1. c. The third bits are 1, 1, and 1. The majority is 1. d. The fourth bits are 1, 0, and 0. The majority is 0. The result is 1110, or 0xE in hexadecimal. April 5, 2016
  • 15. 15 SHA-512 Conditional Function calculation  We apply the Conditional function on E, F, and G buffers. If the leftmost hexadecimal digits of these buffers are 0x9, 0xA, and 0xF respectively, what is the leftmost digit of the result? Solution The digits in binary are 1001, 1010, and 1111. a. The first bits are 1, 1,and 1.The result is F1, which is 1. b. The second bits are 0,0, and 1. The result is G2, which is 1. c. The third bits are 0,1,and 1.The result is G3, which is 1. d. The fourth bits are 1,0,and 1.The result is F4, which is 0. The result is 1110, or 0xE in hexadecimal. April 5, 2016
  • 16. 16 Example using SHA-512 ASCII characters: “abc”, which is equivalent to the following 24-bit binary string: 01100001 01100010 01100011 = 616263 in Hexadecimal The original length is 24 bits, or a hexadecimal value of 18. the 1024-bit message block, in hexadecimal, is 6162638000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 W0 = 6162638000000000 W5 = 0000000000000000 W1 = 0000000000000000 W6 = 0000000000000000 W2 = 0000000000000000 W7 = 0000000000000000 W3 = 0000000000000000 W8 = 0000000000000000 W4 = 0000000000000000 W9 = 0000000000000000 W10 = 0000000000000000 W13 = 0000000000000000 W11 = 0000000000000000 W14 = 0000000000000000 W12 = 0000000000000000 W15 = 0000000000000018 April 5, 2016
  • 17. The following table shows the initial values of these variables and their values after each of the first two rounds. The process continues through 80 rounds. The output of the final round is 73a54f399fa4b1b2 10d9c4c4295599f6 d67806db8b148677 654ef9abec389ca9 d08446aa79693ed7 9bb4d39778c07f9e 25c96a7768fb2aa3 ceb9fc3691ce8326 17 Example using SHA-512 a 6a09e667f3bcc908 f6afceb8bcfcddf5 1320f8c9fb872cc0 b bb67ae8584caa73b 6a09e667f3bcc908 f6afceb8bcfcddf5 c 3c6ef372fe94f82b bb67ae8584caa73b 6a09e667f3bcc908 d a54ff53a5f1d36f1 3c6ef372fe94f82b bb67ae8584caa73b e 510e527fade682d1 58cb02347ab51f91 c3d4ebfd48650ffa f 9b05688c2b3e6c1f 510e527fade682d1 58cb02347ab51f91 g 1f83d9abfb41bd6b 9b05688c2b3e6c1f 510e527fade682d1 h 5be0cd19137e2179 1f83d9abfb41bd6b 9b05688c2b3e6c1f
  • 18. 18 Example using SHA-512 The hash value is then calculated as H1,7 = 5be0cd19137e2179 + ceb9fc3691ce8326 = 2a9ac94fa54ca49f H1,6 = 1f83d9abfb41bd6b + 25c96a7768fb2aa3 = 454d4423643ce80e H1,5 = 9b05688c2b3e6c1f + 9bb4d39778c07f9e = 36ba3c23a3feebbd H1,4 = 510e527fade682d1 + d08446aa79693ed7 = 2192992a274fc1a8 H1,3 = a54ff53a5f1d36f1 + 654ef9abec389ca9 = 0a9eeee64b55d39a H1,2 = 3c6ef372fe94f82b + d67806db8b148677 = 12e6fa4e89a97ea2 H1,1 = bb67ae8584caa73b + 10d9c4c4295599f6 = cc417349ae204131 H1,0 = 6a09e667f3bcc908 + 73a54f399fa4b1b2 = ddaf35a193617aba The resulting 512-bit message digest is ddaf35a193617aba cc417349ae204131 12e6fa4e89a97ea2 0a9eeee64b55d39a 2192992a274fc1a8 36ba3c23a3feebbd 454d4423643ce80e 2a9ac94fa54ca49f
  • 19. 19 SHA-512 Applications  Used as part of a system to authenticate archival video from the International Criminal Tribunal of the Rwandan genocide.  Proposed for use in DNSSEC  are moving to 512-bit SHA-2 for secure password hashing by Unix and Linux vendors
  • 20. 20 SHA-512 Cryptanalysis Published in Year Attack method Rounds New Collision Attacks Against Up To 24-step SHA-2 2008 Deterministic 24/80 Preimages for step-reduced SHA-2 2009 Meet-in-the- middle 42/80 46/80 Advanced meet-in-the-middle preimage attacks 2010 Meet-in-the- middle 42/80 Bicliques for Preimages: Attacks on Skein-512 and the SHA-2 family 2011 Biclique 50/80 57/80 Branching Heuristics in Differential Collision Search with Applications to SHA-512 2014 Heuristic differential 38/80