1、Adopted by INCITS (InterNational Committee for Information Technology Standards) as an American National Standard.Date of ANSI Approval: 12/24/2003Published by American National Standards Institute,25 West 43rd Street, New York, New York 10036Copyright 2003 by Information Technology Industry Council
2、 (ITI).All rights reserved.These materials are subject to copyright claims of International Standardization Organization (ISO), InternationalElectrotechnical Commission (IEC), American National Standards Institute (ANSI), and Information Technology Industry Council(ITI). Not for resale. No part of t
3、his publication may be reproduced in any form, including an electronic retrieval system, withoutthe prior written permission of ITI. All requests pertaining to this standard should be submitted to ITI, 1250 Eye Street NW,Washington, DC 20005.Printed in the United States of AmericaReference numberISO
4、/IEC 10118-3:2003(E)ISO/IEC 2003INTERNATIONAL STANDARD ISO/IEC10118-3Second edition2003-05-01Information technology Security techniques Hash-functions Part 3: Dedicated hash-functions Technologies de linformation Techniques de scurit Fonctions de brouillage Partie 3: Fonctions de brouillage ddies Co
5、pyright American National Standards Institute Provided by IHS under license with ANSINot for ResaleNo reproduction or networking permitted without license from IHS-,-,-ISO/IEC 10118-3:2003(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobes licensing policy, thi
6、s file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In downloading this file, parties accept therein the responsibility of not infringing Adobes licensing policy. The ISO Central Secreta
7、riat accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensur
8、e that the file is suitable for use by ISO member bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below. ISO/IEC 2003 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or uti
9、lized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISOs member body in the country of the requester. ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax
10、 + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published in Switzerland ii ISO/IEC 2003 All rights reservedCopyright American National Standards Institute Provided by IHS under license with ANSINot for ResaleNo reproduction or networking permitted without license from IHS-,-,- ISO/IEC 20
11、03 All rights reserved iiiContents PageForeword.vi1 Scope.12 Normative references 13 Terms and definitions14 Symbols (and abbreviated terms) 24.1 Symbols specified in ISO/IEC 10118-1.24.2 Symbols specific to this part 25 Requirements .36 Model for dedicated hash-functions 47 Dedicated Hash-Function
12、1 (RIPEMD-160)47.1 Parameters, functions and constants47.1.1 Parameters47.1.2 Byte ordering convention .47.1.3 Functions 57.1.4 Constants57.1.5 Initializing value .67.2 Padding method.77.3 Description of the round-function78 Dedicated Hash-Function 2 (RIPEMD-128)88.1 Parameters, functions and consta
13、nts88.1.1 Parameters88.1.2 Byte ordering convention .88.1.3 Functions 98.1.4 Constants98.1.5 Initializing value .98.2 Padding method.98.3 Description of the round-function99 Dedicated Hash-Function 3 (SHA-1) 109.1 Parameters, functions and constants119.1.1 Parameters119.1.2 Byte ordering convention
14、.119.1.3 Functions 119.1.4 Constants119.1.5 Initializing value .119.2 Padding method.129.3 Description of the round-function1210 Dedicated Hash-Function 4 (SHA-256) 1310.1 Parameters, functions and constants1310.1.1 Parameters1310.1.2 Byte ordering convention .1310.1.3 Functions 1310.1.4 Constants14
15、10.1.5 Initializing value .1410.2 Padding method.1410.3 Description of the round-function1411 Dedicated Hash-Function 5 (SHA-512) 1511.1 Parameters, functions and constants15ISO/IEC 10118-3:2003(E) Copyright American National Standards Institute Provided by IHS under license with ANSINot for ResaleN
16、o reproduction or networking permitted without license from IHS-,-,-ISO/IEC 10118-3:2003(E) iv ISO/IEC 2003 All rights reserved11.1.1 Parameters. 1511.1.2 Byte ordering convention. 1611.1.3 Functions . 1611.1.4 Constants. 1611.1.5 Initializing value. 1711.2 Padding method 1711.3 Description of the r
17、ound-function. 1712 Dedicated Hash-Function 6 (SHA-384) . 1812.1 Parameters, functions and constants. 1912.1.1 Parameters. 1912.1.2 Byte ordering convention. 1912.1.3 Functions . 1912.1.4 Constants. 1912.1.5 Initializing value. 1912.2 Padding method 1912.3 Description of the round-function. 1913 Ded
18、icated Hash-Function 7 (WHIRLPOOL) 1913.1 Parameters, functions and constants. 2013.1.1 Parameters. 2013.1.2 Byte ordering convention. 2013.1.3 Functions . 2013.1.4 Constants. 2113.1.5 Initializing value. 2113.2 Padding method 2113.3 Description of the round-function. 22Annex A (informative) Example
19、s. 23A.1 Dedicated Hash-Function 1 23A.1.1 Example 1. 23A.1.2 Example 2. 23A.1.3 Example 3. 23A.1.4 Example 4. 25A.1.5 Example 5. 25A.1.6 Example 6. 25A.1.7 Example 7. 25A.1.8 Example 8. 25A.1.9 Example 9. 28A.1.10 Example 10. 28A.1.11 Example 11. 28A.2 Dedicated Hash-Function 2 28A.2.1 Example 1. 2
20、8A.2.2 Example 2. 29A.2.3 Example 3. 29A.2.4 Example 4. 30A.2.5 Example 5. 30A.2.6 Example 6. 30A.2.7 Example 7. 30A.2.8 Example 8. 31A.2.9 Example 9. 33A.2.10 Example 10. 33A.2.11 Example 11. 33A.3 Dedicated Hash-Function 3 34A.3.1 Example 1. 34A.3.2 Example 2. 34A.3.3 Example 3. 34A.3.4 Example 4.
21、 35A.3.5 Example 5. 36A.3.6 Example 6. 36A.3.7 Example 7. 36Copyright American National Standards Institute Provided by IHS under license with ANSINot for ResaleNo reproduction or networking permitted without license from IHS-,-,-ISO/IEC 10118-3:2003(E) ISO/IEC 2003 All rights reserved vA.3.8 Exampl
22、e 8 .36A.3.9 Example 9 .39A.3.10 Example 10 .39A.3.11 Example 11 .39A.4 Dedicated Hash-Function 4.39A.4.1 Example 1 .39A.4.2 Example 2 .40A.4.3 Example 3 .40A.4.4 Example 4 .41A.4.5 Example 5 .42A.4.6 Example 6 .42A.4.7 Example 7 .42A.4.8 Example 8 .42A.4.9 Example 9 .45A.4.10 Example 10 .45A.4.11 E
23、xample 11 .46A.5 Dedicated Hash-Function 5.46A.5.1 Example 1 .46A.5.2 Example 2 .46A.5.3 Example 3 .46A.5.4 Example 4 .50A.5.5 Example 5 .50A.5.6 Example 6 .50A.5.7 Example 7 .50A.5.8 Example 8 .50A.5.9 Example 9 .51A.5.10 Example 10 .51A.5.11 Example 11 .57A.6 Dedicated Hash-Function 6.57A.6.1 Exam
24、ple 1 .57A.6.2 Example 2 .58A.6.3 Example 3 .58A.6.4 Example 4 .61A.6.5 Example 5 .61A.6.6 Example 6 .61A.6.7 Example 7 .62A.6.8 Example 8 .62A.6.9 Example 9 .62A.6.10 Example 10 .62A.6.11 Example 11 .69A.7 Dedicated Hash-Function 7.69A.7.1 Example 1 .69A.7.2 Example 2 .69A.7.3 Example 3 .69A.7.4 Ex
25、ample 4 .72A.7.5 Example 5 .72A.7.6 Example 6 .72A.7.7 Example 7 .72A.7.8 Example 8 .72A.7.9 Example 9 .77Annex B (informative) Formal specifications .78B.0 Introduction 78B.1 Specification of Dedicated Hash-Function 1.78B.1.1 Auxiliary functions.84B.2 Specification of Dedicated Hash-Function 2.84B.
26、3 Specification of Dedicated Hash-Function 3.86Annex C (normative) Object Identifiers.90Bibliography 91Copyright American National Standards Institute Provided by IHS under license with ANSINot for ResaleNo reproduction or networking permitted without license from IHS-,-,-ISO/IEC 10118-3:2003(E) vi
27、ISO/IEC 2003 All rights reservedForeword ISO (the International Organization for Standardization) and IEC (the International ElectrotechnicalCommission) form the specialized system for worldwide standardization. National bodies that are members oISO or IEC participate in the development of Internati
28、onal Standards through technical committeesestablished by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with
29、 ISO and IEC, also take part in the work. In the field of informationtechnology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical com
30、mittee is to prepare International Standards. Draft InternationaStandards adopted by the joint technical committee are circulated to national bodies for voting. Publication aan International Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is drawn to the
31、possibility that some of the elements of this document may be the subject of patenrights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 10118-3 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technologySubcommittee SC 27, IT Sec
32、urity techniques. This second edition cancels and replaces the first edition (ISO/IEC 10118-3:1998), which has been technicallrevised. ISO/IEC 10118 consists of the following parts, under the general title Information technology Securitechniques Hash-functions: Part 1: General Part 2: Hash-functions
33、 using an n-bit block cipher Part 3: Dedicated hash-functions Part 4: Hash-functions using modular arithmetic Further parts may follow. Copyright American National Standards Institute Provided by IHS under license with ANSINot for ResaleNo reproduction or networking permitted without license from IH
34、S-,-,- ISO/IEC 2003 All rights reserved 1Information technology Security techniques Hash-functions Part 3: Dedicated hash-functions 1 ScopeThis part of ISO/IEC 10118 specifies dedicated hash-functions, i.e., specially designed hash-functions. The hash-functions in this part of ISO/IEC 10118 are base
35、d on the iterative use of a round-function. Seven distinct round-functions are specified, giving rise to distinct dedicated hash-functions.The first and third dedicated hash-functions in clauses 7 and 9 respectively provide hash-codes of lengths up to160 bits; the second in clause 8 provides hash-co
36、des of lengths up to 128 bits; the fourth in clause 10 provideshash-codes of lengths up to 256 bits; the sixth in clause 12 provides hash-codes of a fixed length, 384 bits; and thefifth and seventh in clauses 11 and 13 respectively provide hash-codes of lengths up to 512 bits.2 Normative referencesI
37、SO/IEC 10118-1: 2000, Information technology Security techniques Hash-functions Part 1: General3 Terms and definitions3.1blocka bit-string of length L1, i.e., the length of the first input to the round-function.3.2worda string of 32 bits used in dedicated hash-functions 1, 2, 3 and 4 of clauses 7, 8
38、, 9 and 10 respectively, or a stringof 64 bits used in dedicated hash-functions 5 and 6 of clauses 11 and 12 respectively.3.3matrixan 8 by 8 matrix in which each entry is a string of 8 bits used in dedicated hash-function 7 of clause 13.The following referenced documents are indispensable for the ap
39、plication of this document. For datedreferences, only the edition cited applies. For undated references, the latest edition of the referenceddocument (including any amendments) applies. For the purposes of this document, the definitions given in ISO/IEC 10118-1 and the following apply. INTERNATIONAL
40、 STANDAR ISO/IEC 10118-3:2003(E)Copyright American National Standards Institute Provided by IHS under license with ANSINot for ResaleNo reproduction or networking permitted without license from IHS-,-,-ISO/IEC 10118-3:2003(E)2 ISO/IEC 2003 All rights reserved4 Symbols (and abbreviated terms)4.1 Symb
41、ols specified in ISO/IEC 10118-1This part of ISO/IEC 10118 makes use of the following symbols and notations defined in ISO/IEC 10118-1.BiA byte.D Data.H Hash-code.IV Initializing value.L1The length (in bits) of the first of the two input strings to the round-function .L2The length (in bits) of the s
42、econd of the two input strings to the round-function , of the output string from theround-function , and of the IV.LXLength (in bits) of a bit-string X. A round-function, i.e., if X, Y are bit-strings of lengths L1and L2respectively, then (X, Y) is the stringobtained by applying to X and Y.X Y Exclu
43、sive-or of strings of bits X and Y (where LX= LY).4.2 Symbols specific to this partFor the purpose of this part of ISO/IEC 10118, the following symbols and notations apply:ai, aiSequences of indices used in specifying a round-function.Ai A sequence of constant matrices used in specifying the round-f
44、unction defined in clause 13.c0Function taking a string of 64 elements of GF(28) as input, and giving an 8 by 8 matrix with entries from GF(28)as output, used in specifying the round-function defined in clause 13.c1, c2, c3Functions taking an 8 by 8 matrix of elements of GF(28) as input, and giving
45、an 8 by 8 matrix with entriesfrom GF(28) as output, used in specifying the round-function defined in clause 13.c4Function taking two 8 by 8 matrices of elements of GF(28) as input, and giving an 8 by 8 matrix with entriesfrom GF(28) as output, used in specifying the round-function defined in clause
46、13.Ci, CiConstant words used in the round-functions.C An 8 by 8 circulant matrix with entries chosen from GF(28) used in specifying the round-function in clause 13.DiA block derived from the data-string after the padding process.di, ei, fi, giFunctions taking either one or three words as input and p
47、roducing a single word as output, used inspecifying round-functions.HiA string of L2bits which is used in the hashing operation to store an intermediate result.GF(28) A field defined as GF(2)x / p8(x) where p8(x) = x8+ x4+ x3+ x2+ 1. The elements of the field are 8-bitstrings.M An 8 by 8matrix whose
48、 entries are chosen from GF(28).Copyright American National Standards Institute Provided by IHS under license with ANSINot for ResaleNo reproduction or networking permitted without license from IHS-,-,- ISO/IEC 2003 All rights reserved3q The number of blocks in the data string after the padding and
49、splitting processes.Rn() The operation of right shift by n bits, i.e., if A is a word and n is a non-negative integer then Rn(A) denotes theword obtained by right-shifting the contents of A by n places.s A nonlinear substitution box, which replaces an element x GF(28) with another element sx GF(28);Sn() The operation of circula
