Partial key recovery attack against RMAC
by
Lars R. Knudsen
,
Chris J. Mitchell
,
Chris J. Mitchell Royal Holloway
BibTeX
@MISC{Knudsen_partialkey,
author = {Lars R. Knudsen and Chris J. Mitchell and Chris J. Mitchell Royal Holloway},
title = {Partial key recovery attack against RMAC},
year = {}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
In this paper new `partial' key recovery attacks against the RMAC block cipher based Message Authentication Code scheme are described. That is we describe attacks that, in some cases, recover one of the two RMAC keys much more e#ciently than previously described attacks. Although all attacks, but one, are of no major threat in practice, in some cases there is reason for concern. In particular, the recovery of the second RMAC key (of k bits) may only require around 2 k/2 block cipher operations (encryptions or decryptions).
