Method and system for reusing an MMH function to perform a fast MMH-MAC calculation
View Patent ↗A transmitting and receiving device share a secret which is split into first and second portions. A public function is used to generate a keystream. The length of the keystream is adjusted to equal the length of a message plus the length of the output of an MMH function. The MMH function is calculated as a function of the message and the adjusted keystream. Each L octets, L is the octet length of a MAC, of the output of the MMH function is accumulated into a summation value, which is concatenated with the second secret portion into a concatenation value. The output of the public function, now calculated as a function of the concatenation value, is used in place of a traditional one-time pad to generate the MAC which is sent along with the message to the receiving device.
1. A method, comprising:
acquiring a message to be transmitted to a receiving device;
sharing a secret between the transmitting device and the receiving device;
dividing the secret into a first secret portion and a second secret portion;
generating a first public function output of a public function, the first output of the public function including a stream of a predetermined length of pseudo random information units, wherein the first public function output of the public function is based on the first secret portion;
calculating a first output of a one-way function based on the message and the first public function output;
summing the first output of the one-way function for each of a predetermined number of information units into a summation value;
concatenating of summation value and the second secret portion into a concatenated value;
generating a second public function output for each of a group of the predetermined number of information units, wherein the second public function output is based on the concatenated value;
calculating a second output of the one-way function based on the second public function output; and
transmitting the second output of the one-way function and the message to the receiving device.
2. The method of claim 1 wherein the one-way function is a hash function.
3. The method of claim 1 wherein an information unit is an octet.
4. The method of claim 1 wherein the one-way function is a Multilinear Modular Hash function.
5. The method of claim 1 wherein the predetermined number of information units is the desired length of the output of the one-way function.
6. The method of claim 1 wherein the predetermined length of the pseudo random information units is the same as the length of the message to be transmitted.