Cryptanalysis of BMW

The original BMW (as submitted to the the 1st round of the SHA-3 competition)

Near-collisions in the BMW compression function

Preimage attack on the BMW compression function

ePrint paper combining the above two attacks

The tweaked BMW (as submitted to the the 2nd round of the SHA-3 competition)

Distinguishers for the Compression Function of Blue Midnight Wish with Probability 1 (C program demonstrating these attacks: bmw-distinguisher.zip)

	Søren S. Thomsen. Last update 31 March, 2010.