Improved Integral Distinguishers on Compression Function of GOST R Hash Function

Abstract

Streebog is a new Russian hash function standard (GOST R 34.11–2012). The compression function of Streebog employs an AES-like block cipher which is used in Miyaguchi–Preneel mode. In this paper, we investigate the integral distinguisher on reduced-round Streebog compression function. First, we find 6/7/8/9/10-round integral distinguishers using word-based division property. Then, we further reduce the complexity of the integral distinguishers utilizing subspace trails. As far as we know, we improve the previous best integral distinguisher by three rounds.