An Integral Distinguisher on Grøstl-512 v3
Résumé
This paper presents an improved integral distinguisher using 2913 computations against an 11-round version of the compression function of the SHA-3 candidate Grøstl-512 with the round 3 parameters. The original result presented in [18] was enhanced through the use of different integral properties.