on the security of encrypt-and-mac paradigm

	on the security of encrypt-and-mac paradigm
	Hu Zhenyu ; Lin Dongdai ; Wu Wenling ; Feng Dengguo
刊名	Chinese Journal of Electronics
	2007
卷号	16 期号:1 页码:45-50
关键词	encryption authentication authenticated encryption secure shell (SSH)
通讯作者	Hu, ZY (通讯作者), Chinese Acad Sci, Inst Software, State Key Lab Informat Secur, Beijing 100080, Peoples R China
收录类别	SCI
WOS记录号	WOS:000243961700009
公开日期	2010-08-19
附注	A security notion of Message authentication (MAC) named Tag-secrecy was abstracted from the pseudo-randomness of tagging algorithm, to characterize the security that is very different from the unforgeability (which is the traditional security notion of MAC). The Tag-secrecy is weaker than the pseudo-randomness and can be met by widely used authentication schemes. Under the assumption of Tag-secrecy, it is showed that the Encryptand-MAC can preserve Indistinguishability under Chosen-plaintext attacks (IND-CPA) and Integrity of Plaintext (INT-PTXT) in general.A security notion of encryption called Un-trivial forgeability of Ciphertext (UTF-CTXT) was presented to characterize that for any given ciphertext C, the adversary cannot forge a new ciphertext C' to decrypt to the same plaintext as C (named trivial forgery). This UTF-CTXT was to guarantee that any modification about the ciphertext must correspond to some change of the plaintext. It is proved to be much weaker than Integrity of Ciphertext (INT-CTXT) and satisfied by many popular encryption schemes and modes. With a Tag-secrecy MAC and an UTF-CTXT-secure encryption, Encrypt-and-MAC can satisfy the both strongest security requirements-Indistinguishability under Chosen-ciphertext attacks (IND-CCA) and INT-CTXT.
内容类型	期刊论文
源URL	[http://124.16.136.157/handle/311060/3380]
专题	软件研究所_信息安全国家重点实验室_期刊论文
推荐引用方式 GB/T 7714	Hu Zhenyu,Lin Dongdai,Wu Wenling,et al. on the security of encrypt-and-mac paradigm[J]. Chinese Journal of Electronics,2007,16(1):45-50.
APA	Hu Zhenyu,Lin Dongdai,Wu Wenling,&Feng Dengguo.(2007).on the security of encrypt-and-mac paradigm.Chinese Journal of Electronics,16(1),45-50.
MLA	Hu Zhenyu,et al."on the security of encrypt-and-mac paradigm".Chinese Journal of Electronics 16.1(2007):45-50.