Method of generating message authentication code using stream cipher and authentication/encryption and authentication/decryption methods using stream cipher
View Patent ↗Provided are a method of generating a Message Authentication Code (MAC) using a stream cipher, and authentication/encryption and authentication/decryption methods using a stream cipher. According to the methods, authentication/encryption is performed using a MAC generated using a stream cipher as an initialization vector of the stream cipher. Therefore, it is unnecessary to use a random number generation algorithm to generate the initialization vector, and thus implementation efficiency can be improved. In addition, upon generation of a MAC, a plurality of key stream generators perform computation for a plurality of message blocks, respectively. Therefore, the message blocks are computed in parallel at a time, and thus computation efficiency is excellent.
1. A computer implemented method of generating a Message Authentication Code (MAC) by a processor using a stream cipher, comprising the steps of:
(a) dividing an input message M into k n-bit message blocks,
wherein k is an integer number,
wherein each of the respective divided input message blocks have a unique integer number represented by the respective K integer number;
(b) encrypting by a processor each of the respective divided input message blocks using a result obtained by exclusive-ORing (XORing) with a different key,
wherein the results by XORing each of the divided input message blocks has a different key from any of the other divided input message blocks, wherein each of the different keys is configured with a secret key K MAC for MAC generation with the unique integer number associated with the respective divided input message block, calculating respective intermediate values, and
wherein in step (b), the respective intermediate values hi are calculated by the following formula:
h i =E n ( K MAC ⊕i,m i ),
wherein the k n-bit message blocks obtained by dividing the input message M are denoted by m 1 , m 2 , . . . , mk, one of the message blocks is denoted by mi, and En(K, mi) denotes an encryption algorithm performed for the message blocks mi using K as a key by the key stream generator; and
c) XORing the respective intermediate values resulting from step (b); and
(d) encrypting, at a key stream generator, the result of step (c) using the secret key K MAC for MAC generation and generating a MAC.
2. The computer implemented method of claim 1 , wherein in step (c), the respective intermediate values are XORed by the following formula:
h=⊕ i=1 k h i ,
wherein h denotes a value obtained by XORing the respective intermediate values.
3. The computer implemented method of claim 2 , wherein in step (d), the MAC is expressed by the following formula:
MAC( K MAC ,M )=En( K MAC ,h ),
wherein MAC(K MAC , M) denotes the MAC.
4. The computer implemented method of claim 1 , wherein in step (a), when lengths of the respective message blocks m 1 to mk are not a multiple of n, the lengths are made to be a multiple of n.
5. The computer implemented method of claim 4 , wherein the lengths of the respective message blocks m 1 , . . . , mk are made to be a multiple of n by adding 100 . . . 0 to the respective message blocks m 1 to mk.
6. The computer implemented method of claim 1 , wherein in step (b), the respective intermediate values are calculated in parallel.
7. A computer implemented authentication/encryption method using a stream cipher, comprising the steps of:
(a) inputting a plaintext M and a secret key K MAC for Message Authentication Code (MAC) generation and generating by a processor a MAC MAC(K MAC , M) for the plaintext M according to the method of generating the MAC by a processor using a stream cipher, comprising the steps of:
(a1) dividing the plain text M into k n-bit message blocks,
wherein k is an integer number,
wherein each of the respective divided input message blocks have a unique integer number represented by the respective K integer number;
(a2) encrypting by a processor each of the respective divided input message blocks using a result obtained by exclusive-ORing (XORing) with a different key,
wherein the results by XORing each of the divided input message blocks has a different key from any of the other divided input message blocks,
wherein each of the different keys is configured with a secret key K MAC for MAC generation with the unique integer number associated with the respective divided input message block, calculating respective intermediate values, and
wherein the respective intermediate values hi are calculated by the following formula:
h i =E n ( K MAC ⊕i,m i ),
wherein the k n-bit message blocks obtained by dividing the input message M are denoted by m 1 , m 2 , . . . , mk, one of the message blocks is denoted by mi, and En(K, mi) denotes an encryption algorithm performed for the message blocks mi using K as a key by the key stream generator;
(a3) XORing the respective intermediate values resulting from step (a2); and
(a4) encrypting, at a key stream generator, the result of step (a3) using the secret key K MAC for MAC generation and generating a MAC,
(b) setting the MAC MAC(K MAC , M) generated in step (a) as the stream cipher initialization vector IV;
(c) generating an n-bit key stream using the MAC MAC(K MAC , M), which is the stream cipher initialization vector IV, and a secret key KENC for message encryption;
(d) exclusive-ORing (XORing) the generated key stream with the plaintext M to generate a ciphertext C; and
(e) outputting the ciphertext C.
8. A computer implemented authentication/decryption method using a stream cipher, comprising the steps of:
a) generating a Message Authentication Code (MAC) MAC(K MAC , M) by a process for the plaintext M according to the method of generating the MAC by a processor using the stream cipher, comprising the steps of:
(a1) dividing the plain text M into k n-bit message blocks,
wherein k is an integer number,
wherein each of the respective divided input message blocks have a unique integer number represented by the respective K integer number;
(a2) encrypting by a processor each of the respective divided input message blocks using a result obtained by exclusive-ORing (XORing) with a different key,
wherein the results by XORing each of the divided input message blocks has a different key from any of the other divided input message blocks,
wherein each of the different keys is configured with a secret key K MAC for MAC generation with the unique integer number associated with the respective divided input message block, calculating respective intermediate values, and
wherein the respective intermediate values hi are calculated by the following formula:
h i =E n ( K MAC ⊕i,m i ),
wherein the k n-bit message blocks obtained by dividing the input message M are denoted by m 1 , m 2 , . . . , mk, one of the message blocks is denoted by mi, and En(K, mi) denotes an encryption algorithm performed for the message blocks mi using K as a key by the key stream generator;
(a3) XORing the respective intermediate values resulting from step (a2); and
(a4) encrypting, at a key stream generator, the result of step (a3) using the secret key K MAC for MAC generation and generating a MAC, and
(b) generating a key stream using a stream cipher initialization vector IV and a secret key KENC for message encryption; and
(c) exclusive-ORing (XORing) the key stream with a ciphertext C to generate a plaintext M.
9. The computer implemented method of claim 8 , further comprising the steps of:
(d) when the stream cipher initialization vector IV is the same as the MAC MAC(K MAC , M), determining the ciphertext C as a valid ciphertext (IV, C) and outputting the plaintext M for the valid ciphertext (IV, C).
10. The computer implemented method of claim 9 , wherein in step (d), when the stream cipher initialization vector IV is not the same as the MAC MAC(K MAC , M), an error message is output.
11. The computer implemented method of claim 9 , wherein in step (c), the MAC MAC(K MAC , M) for the plaintext M is generated from the plaintext M and the secret key K MAC for MAC generation.