Design and Evaluation of Online Arithmetic Modules and在线运算模块的设计与评价.pptVIP

Chapter 12 – Hash Algorithms Using Symmetric Ciphers for MACs can use any block cipher chaining mode and use final block as a MAC Data Authentication Algorithm (DAA) is a widely used MAC based on DES-CBC using IV=0 and zero-pad of final block encrypt message using DES in CBC mode and send just the final block as the MAC or the leftmost M bits (16≤M≤64) of final block Hash Functions condenses arbitrary message to fixed size usually assume that the hash function is public and not keyed different than MAC which is keyed hash used to detect changes to message can be used in various ways with message, mostly to create a digital signature a Hash Function produces a fingerprint of some file/message/data h = H(M) Hash Functions Digital Signatures Requirements for Hash Functions can be applied to any sized message M produces fixed-length output h is easy to compute h=H(M) for any message M given h is infeasible to find x s.t. H(x)=h one-way property is infeasible to find any x,y s.t. H(y)=H(x) strong collision resistance Simple Hash Functions are several proposals for simple functions based on XOR of message blocks not secure since can manipulate any message and either not change hash or change hash also need a stronger cryptographic function (next chapter) Block Ciphers as Hash Functions can use block ciphers as hash functions using H0=0 and zero-pad of final block compute: Hi = EMi [Hi-1] and use final block as the hash value similar to CBC but without a key resulting hash is too small (64-bit)- Hash Example: Secure Hash Algorithm-SHA Maximum length of the input is 2^64 bits and outputs 160-bit digest 1. pad message so its length is congruent to 448 mod 512 (first bit 1, then followed by zeros) 2. append a 64-bit integer value to the msg (cantinas the original msg length). 3. initialise 5-word (160-bit) buffer (A,B,C,D,E) to efcdab89,98badcfec3d2e1f0) 4. process message in 16-word (512-bit) blocks: expand 16 words into 80 words by mixing shift