一种认证加密方案的安全性分析

A Security Analysis of an Authenticated Encryption Scheme

利用同态函数所具有的同态性，对Ｈｏｒｓｔｅｒ，Ｍｉｃｈｅｌｓ和Ｐｅｔｒｅｓｅｎ依靠单向函数提出的一种低通信消耗的认证加密方案进行安全分析，并给出一种已知明文的伪造攻击方法，得出在Ｈｏｒｓｔｅｒ，Ｍｉｃｈｅｌｓ和Ｐｅｔｒｅｓｅｎ方案中，当单向函数是同态函数时，这种认证加密方案是不安全的．

By the character of homorphism function, the authors analyze the security of the authenticated encryption scheme, depended on the character of oneway function and proposed by Horster, Michels and Petresen, with low communication costs, and present a known plaintcryphertext attack method.At the end we get the conclusion that if the oneway function is homomorphism, the scheme is insecure.