Generating cryptographic checksums
A method ( 500 ) of generating a cryptographic checksum for a message M(x) is provided. The method comprises pseudo-randomly selecting ( 502 ) a generator polynomial p(x) from the set of polynomials of degree n over a Galois Field and calculating ( 504 ) the cryptographic checksum as a first function g of a division of a second function of M(x), ƒ(M(x)), modulo p(x), g(ƒ(M(x))mod p(x)). The generator polynomial p(x) is pseudo-randomly selected based on a first cryptographic key. By replacing a standard checksum, such as a Cyclic Redundancy Check (CRC), with a cryptographic checksum, an efficient message authentication is provided. The proposed cryptographic checksum may be used for providing integrity assurance on the message, i.e., for detecting random and intentional message changes, with a known level of security. Further, a corresponding computer program, a corresponding computer program product, and a checksum generator for generating a cryptographic checksum, are provided.
1. A method comprising:
pseudo-randomly selecting, based on a first cryptographic key, a generator polynomial p(x) from the set of polynomials of degree n over a Galois Field, wherein the generator polynomial p(x) is a reducible polynomial; and
generating a cryptographic checksum for a message M(x), wherein
generating the cryptographic checksum for message M(x) comprises calculating:
g (ƒ( M ( x ))mod p ( x )),
g a first function, and
ƒ is a second function.
2. The method of claim 1 , wherein the generator polynomial p(x) comprises a non-zero constant term.
3. The method of claim 1 , further comprising pseudo-randomly generating a pad s of length n, wherein the first function g comprises an addition with the pad s.
4. The method of claim 3 , wherein the pad s is generated based on a second cryptographic key.
5. The method of claim 3 , wherein the pad s is dependent on information which is specific for the message.
6. The method of claim 1 , wherein the generator polynomial p(x) is dependent on information which is specific for the message.
7. The method of claim 6 , wherein the information which is specific for the message comprises a message sequence number.
8. The method of claim 1 , wherein the second function ƒ comprises a multiplication with a fixed polynomial x n .
9. The method of claim 1 , further comprising:
appending the generated cryptographic checksum to the message, and
transmitting the message and the appended cryptographic checksum.
10. The method of claim 1 further comprising:
receiving the message and cryptographic checksum appended to the message,
verifying if the generated cryptographic checksum is identical to the cryptographic checksum appended to the message.
11. A computer program product comprising a non-transitory computer readable medium storing a computer program comprising:
instructions for pseudo-randomly selecting, based on a first cryptographic key, a generator polynomial p(x) from the set of polynomials of degree n over a Galois Field, wherein the generator polynomial p(x) is a reducible polynomial; and
instructions for generating a cryptographic checksum for a message M(x), wherein
the instructions for generating the cryptographic checksum for message M(x) comprises instructions for calculating: g(ƒ(M(x))mod p(x)), wherein g is a first function, and ƒ is a second function.
12. An apparatus, the apparatus being configured to:
pseudo-randomly select, based on a first cryptographic key, a generator polynomial p(x) from the set of polynomials of degree n over a Galois Field, wherein the generator polynomial p(x) is a reducible polynomial; and
generate a cryptographic checksum for a message M(x) by performing a process comprising calculating:
g (ƒ( M ( x ))mod p ( x )), wherein
g a first function, and
ƒ is a second function.
13. The apparatus of claim 12 , wherein the generator polynomial p(x) comprises a non-zero constant term.
14. The apparatus of claim 12 , being further configured for pseudo-randomly generating a pad s of length n, wherein the first function g comprises an addition with the pad s.
15. The apparatus of claim 14 , being further configured for generating the pad s based on a second cryptographic key.
16. The apparatus of claim 14 , wherein the pad s is dependent on information which is specific for the message.
17. The apparatus of claim 12 , wherein the generator polynomial p(x) is dependent on information which is specific for the message.
18. The apparatus of claim 17 , wherein the information which is specific for the message comprises a message sequence number.
19. The apparatus of claim 12 , wherein the second function ƒ comprises a multiplication with a fixed polynomial x n .
20. The apparatus of claim 12 , wherein the apparatus is further adapted to: transmit the message together with the generated cryptographic checksum.
21. The apparatus of claim 12 , wherein the apparatus is further adapted to: verify if the generated cryptographic checksum is identical to a cryptographic checksum received with the message.
22. The apparatus of claim 12 , wherein the apparatus is a mobile terminal.
23. The apparatus of claim 12 , wherein the apparatus is radio access node.