Comments on NIST's RMAC Proposal (2002)
by
Phillip Rogaway
BibTeX
@MISC{Rogaway02commentson,
author = {Phillip Rogaway},
title = {Comments on NIST's RMAC Proposal},
year = {2002}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
this paper [JJV], NIST did a lot of further, independent, design. They ended up with a kind of object that isn't even a conventional MAC, and isn't supported by any published scientific work. We don't think this is a right way to go. We recommend abandoning RMAC and choosing a more mature construction
Citations
| 284 | New Hash Functions and their Use in Authentication and Set Equality - Wegman, Carter - 1981 |
| 48 | CBC MACs for arbitrary-length messages: The three-key constructions - Black, Rogaway |
| 35 | CBC MAC for real-time data sources - Petrank, Rackoff - 2000 |
| 24 | the security of randomized cbc-mac beyond the birthday paradox limit – a new construction - Jaulmes, Joux, et al. - 2002 |
| 18 | Stateless evaluation of pseudorandom functions: Security beyond the birthday barrier - Bellare, Goldreich, et al. |
| 17 | The AES-XCBC-MAC-96 algorithm and its use with IPsec. RFC 3566, Network Working Group - Frankel, Herbert - 2003 |
| 3 | Recommendation for block cipher modes of operation: The rmac authentication mode, methods and techniques - Dworkin |
