MetaCart Sign in to MyCiteSeerX

Include Citations | Advanced Search | Help

Disambiguated Search | Include Citations | Advanced Search | Help

Message Authentication with MD5 (1995)

by Burt Kaliski And ,  Burt Kaliski ,  Matt Robshaw
RSA Labs' CryptoBytes
Add To MetaCart

Abstract:

e the hash function doesn't have a key. A hash function can provide message authentication in a most satisfying manner when combined with a digital signature algorithm, which does have a key. But typical digital * Copyright 1995 RSA Laboratories, a division of RSA Data Security, Inc. All rights reserved. RSA Data Security, Inc. part number 003-903060-100-000-000. Reprinted from CryptoBytes, 1(1), 5-8, Spring 1995. 2 signature schemes have some performance overhead, which while acceptable for the periodic setup of communications sessions, is often too large on a message-by-message basis. Thus, the focus is on message authentication based on a shared secret key, which is ideally integrated into the hash function in some manner. As an illustration of the challenges, consider the "prefix" approach where the message authentication code is computed simply as the hash of the concatenation of the key and the message, where the key co

Citations

131 The Security of Cipher Block Chaining – Bellare, Kilian, et al. - 1994
100 XOR MACs: New methods for message authentication using finite pseudorandom functions – Bellare, Gu'erin, et al. - 1995
2 A design principle for hash functions – Damgrd - 1989
1 Keying MD5 - Message authentication via iterated pseudorandomness – Bellare, Canetti, et al.