9-消息认证和Hash函数.pptxVIP

第9讲 消息认证与Hash函数;消息认证;消息认证;消息认证的三种方式;Message Authentication Code;Message Authentication Code;MAC应用方式（1）消息认证;MAC应用方式（2）消息认证和保密性：明文相关;MAC应用方式（3）消息认证和保密性：密文相关;关于MAC算法;关于MAC算法;MAC算法的要求;MAC based on DES;Hash Function;Hash Function;Hash Function;Hash函数的基本用途（a）;Hash函数的基本用途（b）;Hash函数的基本用途（c）;Hash函数的基本用途（d）;Hash函数的基本用途（e）;Hash函数的基本用途（f）;Hash问题;生日攻击理论基础;生日攻击理论基础;生日攻击例子;hash函数通用模型;hash函数模型图;MD5 算法;MD5: 示意图;MD5步骤;MD5的每一步运算示意图;每一轮中16步的每一步运算结构;var int a := 0 var int b := 0xEFCDAB89 var int c := 0x98BADCFE var int d := 0 //Use binary integer part of the sines of integers as constants: for i from 0 to 63 T[i] := floor(abs(sin(i + 1)) × 2^32) ;//Main loop: for i from 0 to 63 if 0 ≤ i ≤ 15 then f := (b and c) or ((not b) and d) // F函数 g := i else if 16 ≤ i ≤ 31 f := (d and b) or ((not d) and c) //G函数 g := (5×i + 1) mod 16 else if 32 ≤ i ≤ 47 f := b xor c xor d //H函数 g := (3×i + 5) mod 16 else if 48 ≤ i ≤ 63 f := c xor (b or (not d)) //I函数 g := (7×i) mod 16 temp := d d := c c := b b := leftrotate((a + f + T[i] + x[g]),r[i])) + b a := temp ;MD5(The quick brown fox jumps over the lazy dog) = 9e107d9d372bb6826bd81d3542a419d6 MD5(The quick brown fox jumps over the lazy cog) = 1055d3e698d289f2af8663725127bd4b MD5() = d41d8cd98f00b204e9800998ecf8427e ;关于MD5;关于MD5;Secure Hash Algorithm简介;SHA家族;SHA-1算法;压缩函数;每一轮中20步的每一步运算结构;SHA-1算法结论;SHA安全性;RIPEMD-160简介;RIPEMD-160的压缩函数;HMAC简介;HMAC示意图;HMAC的定义与特征;function hmac (key, message) if (length(key) blocksize) then key = hash(key) // keys longer than blocksize are shortened else if (length(key) blocksize) then key = key || zeroes(blocksize - length(key)) // keys shorter than blocksize are zero-padded end if opad = [0x5c * blocksize] ⊕ key // Where blocksize is that of the underlying hash function ipad = [0x36 * blocksize] ⊕ key // Where ⊕ is exclusive or (XOR) return hash(opad || hash(ipad || message)) // Where ∥ is concatenation end function ;HMAC的定义与