双层可并行消息认证码的设计与分析

Design and Analysis of Two-level Parallelizable Message Authentication Code

在一些安全协议中,需要同时认证一组数据,可以将其视为一个字符串向量。普通消息认证码的输入仅为单个字符串,针对该问题提出一个输入为字符串向量的消息认证码TLPMAC。TLPMAC是基于PMAC的变体,它模拟PMAC的结构。TLPMAC具有双层可并行性和可预处理性,能处理包含任意个分量的字符串向量且仅需一个密钥。将普通消息认证码的安全性定义扩展到输入为向量的情形,给出TLPMAC的安全性证明。

In some security protocols, a group of data should be authenticated together. They can be considered as a vector of character strings. An ordinary message authentication code only accepts a single character string as input. Aiming at this problem, this paper proposes a message authentication code TLPMAC, whose input is a vector of character strings. TLPMAC is based on a variant of PMAC and simulates the structure of PMAC. TLPMAC is two-level parallelizable, pre-processible, and can process a vector of character stings including any number of components while only using one key. It extends the security notions of ordinary message authentication codes to the vector-input scenario and proves the security of TLPMAC.