消息认证码的安全分析.pptx

Generic Attacks against MACs(消息认证码的安全分析) Lei Wang Lab of Cryptography and Computer Security (LoCCS) Shanghai Jiao Tong University ChinaCrypt 2015 Modern Cryptography Main objectives: confidentiality; authenticity Applications of authenticity email signature, credit cards, software update, etc. Cryptographic protocols of authenticity asymmetric-key: digital signature; symmetric-key: message authentication code (MAC) MAC Symmetric-key: Alice and Bob share secret key before communications. Provide authenticity and integrity: Bob verifies if T=T’ holds. Alice Bob M T (M, T) M