OPMAC: one-key poly1305 MAC

Dayin Wang,Dongdai Lin,Wenling Wu

DOI: https://doi.org/10.1007/11937807_7

2006-01-01

Abstract:In this paper, we present One-Key Poly1305 MAC(OPMAC) and prove its security for arbitrary length message. OPMAC is deterministic and takes only one 16-byte key. Previously, Poly1305 MAC is nonce-based and requires two 16-byte keys and a 16-byte nonce, 48-byte in total.

What problem does this paper attempt to address?

An Improved Poly1305 Mac

Dayin Wang,Dongdai Lin,Wenling Wu

DOI: https://doi.org/10.1007/11767480_19

2006-01-01

Abstract:In this paper, we propose an improved Poly1305 MAC, called IPMAC. IPMAC is a refinement of Poly1305 MAC shown by Bernstein. We use only one 16-byte key and one 16-byte nonce for IPMAC while Poly1305 MAC uses two 16-byte keys and one 16-byte nonce, 48-byte in total. The cost of reducing the size of secret keys is almost negligible: only one encryption. Similarly to Poly1305 MAC, our algorithm correctly and efficiently handles messages of arbitrary bit length.
A variant of poly1305 MAC and its security proof

Dayin Wang,Dongdai Lin,Wenling Wu

DOI: https://doi.org/10.1007/11596981_55

2005-01-01

Abstract:We give a variant of Poly1305 MAC and prove its security viewing this MAC as a Carter-Wegman MAC. The proposed variant not only keeps all the good properties of the Poly1305, but also makes Poly1305 deterministic.
Forgery Attacks on Several Beyond-Birthday-Bound Secure MACs

Yaobin Shen,Francois-Xavier Standaert,Lei Wang

DOI: https://doi.org/10.1007/978-981-99-8727-6_6

2023-01-01

Abstract:At CRYPTO'18, Datta et al. proposed nPolyMAC and proved the security up to 2(2n/3) authentication queries and 2(n) verification queries. At EUROCRYPT'19, Dutta et al. proposed CWC+ and showed the security up to 2(2n/3) queries. At FSE'19, Datta et al. proposed PolyMAC and its key-reduced variant 2k-PolyMAC, and showed the security up to 2(2n/3) queries. This security bound was then improved by Kim et al. (EUROCRYPT'20) and Datta et al. (FSE'23) respectively to 2(3n/4) and in the multi-user setting. At FSE'20, Chakraborti et al. proposed PDM*MAC and 1k-PDM*MAC, and showed the security up to 2(2n/3) queries. Recently, Chen et al. proposed nEHtM(p)(+) and showed the security up to 2(2n/3) queries. In this paper, we show forgery attacks on nPolyMAC, CWC+, PolyMAC, 2k-PolyMAC, PDM* MAC, 1k-PDM*MAC and nEHtM(p)(+). Our attacks exploit some vulnerability in the underlying polynomial hash function Poly, and (i) require only one authentication query and one verification query; (ii) are nonce-respecting; (iii) succeed with probability 1. Thus, our attacks disprove the provable high security claims of these schemes. We then revisit their security analyses and identify what went wrong. Finally, we propose two solutions that can restore the beyond-birthday-bound security.
An Efficient One-key Carter-Wegman Message Authentication Code

Jin Xu,Dayin Wang,Dongdai Lin,Wenling Wu

DOI: https://doi.org/10.1109/iccias.2006.295275

2006-01-01

Abstract:In this paper, we present an efficient one-key Carter-Wegman message authentication code, called one-key Galois message authentication code (OGMAC), and prove its security for arbitrary length message. Generally, Carter-Wegman MACs use a universal hash and a block cipher, and require two keys, one for the block cipher and the other for the universal hash. OGMAC, proposed here, uses only one key and gets a good performance through the use of the universal hash over a binary finite field
A Lightweight Key Management Scheme For 60 Ghz Wpan

Ruixue Sun,Zhiguo Shi,Rongxing Lu,Jian Qiao,Xuemin (Sherman) Shen

DOI: https://doi.org/10.1109/WCSP.2012.6542795

2012-01-01

Abstract:The 60 GHz ultra-high-speed Wireless Personal Area Network (WPAN) has received considerable attention in recent years. Information security, which ensures secure communication within the network, is of particular importance. In this paper, we propose an efficient lightweight key management scheme for 60 GHz WPAN, which deploys secure encryption algorithms and one-way hash function to achieve efficient key exchange and updating managements. Detailed security analysis has shown its security provisions. In addition, performance evaluation is also provided to demonstrate its efficiency in terms of session key distribution and group key updating.
Another Look at PMAC.

Dayin Wang,Dongdai Lin,Wenling Wu

2007-01-01

Abstract:We can view an existing Message Authentication Code (MAC) as a Carter-Wegman MAC in spite of the fact it may not have been designed as one. This will make the analysis easier than it has been when considered from other viewpoints. In this paper, we can look PMAC with two keys as a Carter-Wegman MAC and get a simple security proof for it. Using this viewpoint to look at PMAC, we will learn not only why the PMAC is such constructed, but also a new method of constructing MACs.
A New Message Authentication Code and Its Security Proof

WANG Da-yin,LIN Dong-dai,WU Wen-ling

DOI: https://doi.org/10.3321/j.issn:0372-2112.2006.10.014

2006-01-01

Abstract:The most important tool to protect data integrity is Message Authentication Code(MAC),which is widely used in many kinds of secure systems.With the development of the theory of provable security,the MACs,which have security proof,are the first choice of many people.Based on the constructions of XOR MAC and PMAC,we define a deterministic fully parallelizable block-cipher mode of operation for message authentication-DXOR MAC(Deterministic XOR MAC).We prove its security,quantifying an adversary's forgery probability in terms of the quality of the block cipher as a pseudo-random permutation.
A Parallelizable Message Authentication Code

WANG Da-Yin,LIN Dong-Dai,WU Wen-Ling

DOI: https://doi.org/10.1360/jos181756

2007-01-01

Journal of Software

Abstract:This paper defines and analyzes a fully deterministic parallelizable block-cipher mode of operation for message authentication— DPMAC (deterministic parallelizable message authentication code). DPMAC is constructed based on a 128-bit block cipher, works for strings of any bit length, and employs a single block-cipher key. Its security is proved, using the Game-Playing technique to quantify an adversary's forgery probability in terms of the quality of the block cipher as a pseudo-random permutation.
Security Performance Analysis of an M-code Keying OCDMA System

Liqiao Qin,Hongxi Yin,Wei Liang,Ziyu Wang,Anshi Xu

DOI: https://doi.org/10.1007/s11107-007-0081-2

IF: 1.768

2008-01-01

Photonic Network Communications

Abstract:In this article, an M-code keying OCDMA system with parallel encoders/decoders is presented and its security performance is quantitatively analyzed. Under brute-force searching techniques, the formula about the average searching time is derived. The bit-correct-interception possibilities for tapping individual and multiple users’ signals are calculated, respectively. By analysis, it is shown that the security performance of an OCDMA system can be enhanced by employing M-code keying.
Cryptanalysis On Hmac/Nmac-Md5 And Md5-Mac

Xiaoyun Wang,Hongbo Yu,Wei Wang,Haina Zhang,Tao Zhan

DOI: https://doi.org/10.1007/978-3-642-01001-9_7

2009-01-01

Abstract:In this paper, we present the first distinguishing attack on HMAC and NMAC based on MD5 without related keys, which distinguishes the HMAC/NMAC-MD5 from HMAC/NMAC with a random function. The attack needs 2(97) queries, with a success probability 0.87, while the previous distinguishing attack on HMAC-MD5 reduced to 33 rounds takes 2(126.1) messages with a success rate of 0.92. Furthermore, we give distinguishing and partial key recovery attacks on MDx-MAC based on MD5. The MDx-MAC was proposed by Preneel and van Oorschot in Crypto'95 which uses three subkeys derived from the initial key. We are able to recover one 128-bit subkey with 2(97) queries.
Quantum Attacks Against BBB Secure PRFs or MACs Built from Public Random Permutations.

Jiehui Nan,Honggang Hu,Ping Zhang,Yiyuan Luo

DOI: https://doi.org/10.1007/s11128-022-03774-5

IF: 1.965

2022-01-01

Quantum Information Processing

Abstract:Since the seminal work of Chen et al. to construct pseudorandom functions (PRFs) from the public random permutations, a series of designs of beyond-birthday-bound secure PRFs or message authentication codes(MACs) have been proposed, like $$\textsf{pEDM}$$ , $$\textsf{pPMAC}$$ _ $$\textsf{Plus}$$ , $$\textsf{PDM}\text {* }\textsf{MAC}$$ , and $$\textsf{1K}\text {-}\textsf{PDM}\text {* }\textsf{MAC}$$ , etc. These constructions were classically proved to be secure at least up to $$O(2^{2n/3})$$ queries. In this paper, we consider to attack these constructions in the quantum setting. In particular, we show the key-recovery attack against $$\textsf{pEDM}$$ and $$\textsf{pPMAC}$$ _ $$\textsf{Plus}$$ with $$O(n\cdot 2^{n/2})$$ quantum queries by using Grover-meets-Simon algorithm. Moreover, a forgery attack is given against the constructions $$\textsf{PDM}\text {* }\textsf{MAC}$$ and $$\textsf{nEHtM}_p$$ with O(n) quantum complexity, and under the same query complexity, we can even recover the key of $$\textsf{1K}\text {-}\textsf{PDM}\text {* }\textsf{MAC}$$ .
A PUF-based provably secure message authentication algorithm and application

Xiaolin Zhang,Dawu Gu

DOI: https://doi.org/10.1360/ssi-2021-0261

2021-01-01

Scientia Sinica Informationis

Abstract:Message authentication code (MAC), widely used in all kinds of information systems, is a symmetric cryptographic algorithm that checks message integrity and source authenticity. However, when the devices running MAC face physical invasion, the attacker can extract the keys inside and generate valid tags by directly reading the memory or adjusting the circuits. In this paper, we propose PUF-MAC, a new MAC algorithm based on the physically unclonable function (PUF), which is constructed from the hash function and PUF. The PUF is a kind of data mapping entity with unclonable internal structures and unpredictable outputs. The difference between mappings preserved by PUF entities originates from minor variations in the physical environment during production. The communicating parties can apply the PUF to form the shared secret key. Under the standard security model, this paper inductively proves that PUF-MAC satisfies the existential unforgeability under a chosen message attack, and the EUF-CMA security of PUF-MAC relies on the (weak) collision resistance of hash and the EUF-CMA security of PUF. Additionally, this paper recasts PUF-MAC into a key agreement protocol with forward/backward security, along with a bilateral authentication protocol by which its practicability is indicated. A comparison with other MAC reveals that PUF-MAC is indeed lightweight and easy to deploy, and PUF-MAC requires no pre-established PUF responses. The involvement of the PUF allows an attacker to forge a valid tag even after retrieving the key, thereby ensuring communication security.
Opportunistic Periodic MAC Protocol for Cognitive Radio Networks

Dongyue Xue,Eylem Ekici,Xinbing Wang

DOI: https://doi.org/10.1109/GLOCOM.2010.5683346

2010-01-01

Abstract:Cognitive radio networks enable opportunistic sharing of bandwidth/spectrum. In this paper, we propose a new Opportunistic Periodic MAC protocol (OP-MAC), a protocol that aims at improving the coexistence of licensed primary users and unlicensed secondary users in cognitive radio networks. Under OP-MAC, secondary users cooperate to periodically sense channels, report channel states and exchange control signals, in such a way that we can avoid the common control channel problem and the multi-channel hidden terminal problem. Analysis is provided for an ON/OFF channel scenario and is shown to be consistent with simulation results. With the requirement of only one transceiver per secondary user, OP-MAC is shown to provide higher capacity than a Random-MAC and a control-channel-based CO-MAC.
Cumulative Message Authentication Codes for Resource-Constrained IoT Networks

He Li,Vireshwar Kumar,Jung-Min Park,Yaling Yang

DOI: https://doi.org/10.48550/arXiv.2001.05211

2020-10-15

Abstract:In resource-constrained IoT networks, the use of conventional message authentication codes (MACs) to provide message authentication and integrity is not possible due to the large size of the MAC output. A straightforward yet naive solution to this problem is to employ a truncated MAC which undesirably sacrifices cryptographic strength in exchange for reduced communication overhead. In this paper, we address this problem by proposing a novel approach for message authentication called \textit{Cumulative Message Authentication Code} (CuMAC), which consists of two distinctive procedures: \textit{aggregation} and \textit{accumulation}. In aggregation, a sender generates compact authentication tags from segments of multiple MACs by using a systematic encoding procedure. In accumulation, a receiver accumulates the cryptographic strength of the underlying MAC by collecting and verifying the authentication tags. Embodied with these two procedures, CuMAC enables the receiver to achieve an advantageous trade-off between the cryptographic strength and the latency in processing of the authentication tags. Furthermore, for some latency-sensitive messages where this trade-off may be unacceptable, we propose a variant of CuMAC that we refer to as \textit{CuMAC with Speculation} (CuMAC/S). In addition to the aggregation and accumulation procedures, CuMAC/S enables the sender and receiver to employ a speculation procedure for predicting future message values and pre-computing the corresponding MAC segments. For the messages which can be reliably speculated, CuMAC/S significantly reduces the MAC verification latency without compromising the cryptographic strength. We have carried out comprehensive evaluation of CuMAC and CuMAC/S through simulation and a prototype implementation on a real car.

Cryptography and Security
SPD: Efficient MPC mod for Dishonest Majority

Ronald Cramer,Ivan Damgård,Daniel Escudero,Peter Scholl,Chaoping Xing

DOI: https://doi.org/10.1007/978-3-319-96881-0_26

2018-01-01

Abstract:Most multi-party computation protocols allow secure computation of arithmetic circuits over a finite field, such as the integers modulo a prime. In the more natural setting of integer computations modulo , which are useful for simplifying implementations and applications, no solutions with active security are known unless the majority of the participants are honest. We present a new scheme for information-theoretic MACs that are homomorphic modulo , and are as efficient as the well-known standard solutions that are homomorphic over fields. We apply this to construct an MPC protocol for dishonest majority in the preprocessing model that has efficiency comparable to the well-known SPDZ protocol (Damgård et al., CRYPTO 2012), with operations modulo instead of over a field. We also construct a matching preprocessing protocol based on oblivious transfer, which is in the style of the MASCOT protocol (Keller et al., CCS 2016) and almost as efficient.
MAC Wiretap Channels with Confidential and Open Messages: Improved Achievable Region and Low-complexity Precoder Design

Hao Xu,Kai-Kit Wong,Giuseppe Caire

2023-06-21

Abstract:This paper investigates the achievable region and precoder design for multiple access wiretap (MAC-WT) channels, where each user transmits both secret and open (i.e., non-confidential) messages. All these messages are intended for the legitimate receiver (or Bob for brevity) and the eavesdropper (Eve) is interested only in the secret messages of all users. By allowing users with zero secret message rate to act as conventional MAC channel users with no wiretapping, we show that the achievable region of the discrete memoryless (DM) MAC-WT channel given in [1] can be enlarged. In [1], the achievability was proven by considering the two-user case, making it possible to prove a key auxiliary lemma by directly using the Fourier-Motzkin elimination procedure. However, this approach does not generalize to the case with any number of users. In this paper, we provide a new region that generally enlarges that in [1] and provide general achievability proof.

Information Theory
LedMAC: More Efficient Variants of LightMAC.

Yaobin Shen,Lei Wang,Dawu Gu

2021-01-01

Abstract:LightMAC is a lightweight MAC designed by Luykx et al. and recently standardized by ISO/IEC. In this paper, we refine LightMAC and suggest two simple variants called LedMAC1 and LedMAC2. Compared to LightMAC, our first scheme LedMAC1 avoids unnecessary padding without sacrificing the security. Our second scheme LedMAC2 further reduces the number of keys from two to one, and achieves the same level security as that of LightMAC.
Generic State-Recovery and Forgery Attacks on ChopMD-MAC and on NMAC/HMAC

Yusuke Naito,Yu Sasaki,Lei Wang,Kan Yasuda

DOI: https://doi.org/10.1007/978-3-642-41383-4_6

2013-01-01

Abstract:This paper presents new attacks on message authentication codes (MACs). Our attacks are generic and applicable to (secret-prefix) ChopMD-MAC and to NMAC/HMAC, all of which are based on a Merkle-Damgård hash function. We show that an internal state value of these MACs can be recovered with time/queries less than O(2 n )—roughly, with an O(2 n /n) complexity, where ChopMD has 2n-bit state and NMAC/HMAC n-bit. We also show that state-recovery can be extended to MAC-security compromise, such as almost universal forgeries and distinguishing-H attacks. While our results remain to be of theoretical interest due to the high attack complexity, they lead to profound consequences. Namely, our analyses provide us with proper understanding of these MAC constructions, for in the literature the complexity has been implicitly and explicitly assumed to be O(2 n ). Since the complexity is very close to 2 n , we make a precise calculation of attack complexities and of success probabilities in order to show that the total complexity is indeed less than 2 n . Moreover, we perform an experiment by computer simulation to demonstrate that our calculation is correct.
Quantum attacks on Beyond-Birthday-Bound MACs

Hong-Wei Sun,Bin-Bin Cai,Su-Juan Qin,Qiao-Yan Wen,Fei Gao

DOI: https://doi.org/10.1016/j.physa.2023.129047

2023-07-18

Abstract:In this paper, we investigate the security of several recent MAC constructions with provable security beyond the birthday bound (called BBB MACs) in the quantum setting. On the one hand, we give periodic functions corresponding to targeted MACs (including PMACX, PMAC with parity, HPxHP, and HPxNP), and we can recover secret states using Simon algorithm, leading to forgery attacks with complexity O(n) . This implies our results realize an exponential speedup compared with the classical algorithm. Note that our attacks can even break some optimally secure MACs, such as mPMAC+-f, mPMAC+-p1, mPMAC+-p2, mLightMAC+-f, etc. On the other hand, we construct new hidden periodic functions based on SUM-ECBC-like MACs: SUM-ECBC, PolyMAC, GCM-SIV2, and 2K-ECBC − Plus, where periods reveal the information of the secret key. Then, by applying Grover-meets-Simon algorithm to specially constructed functions, we can recover full keys with O(2n/2n) or O(2m/2n) quantum queries, where n is the message block size and m is the length of the key. Considering the previous best quantum attack, our key-recovery attacks achieve a quadratic speedup.

physics, multidisciplinary
A New Security Analysis for XOR Message Authentication Code

WANG Da-Yin,LIN Dong-Dai,WU Wen-ling,JIANG Zhong-Hua

DOI: https://doi.org/10.3969/j.issn.1002-1175.2006.02.017

2006-01-01

Abstract:Message Authentication Codes are very important tools to protect data integrity.XOR-MAC is defined by Bellare,who also gives a security analysis for it.But the security analysis they gave for XOR-MAC is complex.In this paper,we use the Game-Playing technique to give a new security analysis for XOR-MAC.We prove XOR-MAC secure,quantifying an adversary's success probability of distinguishing XOR-MAC from a purely random function in terms of the quality of the block cipher as a pseudorandom permutation.

OPMAC: one-key poly1305 MAC

An Improved Poly1305 Mac

A variant of poly1305 MAC and its security proof

Forgery Attacks on Several Beyond-Birthday-Bound Secure MACs

An Efficient One-key Carter-Wegman Message Authentication Code

A Lightweight Key Management Scheme For 60 Ghz Wpan

Another Look at PMAC.

A New Message Authentication Code and Its Security Proof

A Parallelizable Message Authentication Code

Security Performance Analysis of an M-code Keying OCDMA System

Cryptanalysis On Hmac/Nmac-Md5 And Md5-Mac

Quantum Attacks Against BBB Secure PRFs or MACs Built from Public Random Permutations.

A PUF-based provably secure message authentication algorithm and application

Opportunistic Periodic MAC Protocol for Cognitive Radio Networks

Cumulative Message Authentication Codes for Resource-Constrained IoT Networks

SPD: Efficient MPC mod for Dishonest Majority

MAC Wiretap Channels with Confidential and Open Messages: Improved Achievable Region and Low-complexity Precoder Design

LedMAC: More Efficient Variants of LightMAC.

Generic State-Recovery and Forgery Attacks on ChopMD-MAC and on NMAC/HMAC

Quantum attacks on Beyond-Birthday-Bound MACs

A New Security Analysis for XOR Message Authentication Code