Automated Security Proofs for Almost-Universal Hash for MAC Verification - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2013

Automated Security Proofs for Almost-Universal Hash for MAC Verification

Martin Gagné
  • Fonction : Auteur
Yassine Lakhnech
  • Fonction : Auteur
  • PersonId : 837979

Résumé

Message authentication codes (MACs) are an essential primitive in cryptography. They are used to ensure the integrity and authenticity of a message, and can also be used as a building block for larger schemes, such as chosen-ciphertext secure encryption, or identity-based encryption. We present a method for automatically proving the security for block-cipher-based and hash-based MACs in the ideal cipher model. Our method proceeds in two steps, following the traditional method for constructing MACs. First, the 'front end' of the MAC produces a short digest of the long message, then the 'back end' provides a mixing step to make the output of the MAC unpredictable for an attacker. We develop a Hoare logic for proving that the front end of the MAC is an almost-universal hash function. The programming language used to specify these functions is quite expressive. As a result, our logic can be used to prove functions based on block ciphers and hash functions. Second, we provide a list of options for the back end of the MAC, each consisting of only two or three instructions, each of which can be composed with an almost-universal hash function to obtain a secure MAC. Using our method, we implemented a tool that can prove the security of many CBC-based MACs (DMAC, ECBC, FCBC and XCBC to name only a few), PMAC and HMAC.
Fichier principal
Vignette du fichier
GLL13.pdf (490.31 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01759927 , version 1 (05-04-2018)

Identifiants

  • HAL Id : hal-01759927 , version 1

Citer

Martin Gagné, Pascal Lafourcade, Yassine Lakhnech. Automated Security Proofs for Almost-Universal Hash for MAC Verification. Computer Security - {ESORICS} 2013 - 18th European Symposium on Research in Computer Security,, Sep 2013, Egham, United Kingdom. ⟨hal-01759927⟩
159 Consultations
80 Téléchargements

Partager

Gmail Facebook X LinkedIn More