Pushing Collision Attacks on SHA-2 to 39 Steps
kept by devopsfolk
The paper reports the first collision attacks on 38-step SHA-256 and SHA-512, and a 39-step attack on SHA-512, achieving low memory and specific time complexities.