Exercise 2 (MAC schemes derived from block ciphers ( Let E denote the family of encryption functions for a block cipher where plaintext blocks, ciphertext blocks, and keys are each n = 80 bits in length. Let H: {0,1} {0, 1}" be a hash function. Assume that plaintext messages m all have bit-lengths that are multiples of n; we write m = (m₁, m₂,..., m.), i.e. m is composed of t blocks m, of n bits each. Consider the following MAC schemes, each using an n-bit secret key k. 1. MAC, (m) = c₁, where co= 0, and c = c₁-1 m, ⒸE(m) for 1 ≤ i ≤t. 2. MACK(m) Ek(H(m)). Are any of these MAC schemes secure? Justify your answer and clearly state any assumptions you make.

Computer Networking: A Top-Down Approach (7th Edition)
7th Edition
ISBN:9780133594140
Author:James Kurose, Keith Ross
Publisher:James Kurose, Keith Ross
Chapter1: Computer Networks And The Internet
Section: Chapter Questions
Problem R1RQ: What is the difference between a host and an end system? List several different types of end...
icon
Related questions
Question
Exercise 2 (MAC schemes derived from block ciphers (
Let E denote the family of encryption functions for a block cipher where plaintext blocks, ciphertext
blocks, and keys are each n = 80 bits in length. Let H: {0,1} {0, 1}" be a hash function.
Assume that plaintext messages m all have bit-lengths that are multiples of n; we write m =
(m₁, m₂,...,m), i.e. m is composed of t blocks m, of n bits each. Consider the following MAC
schemes, each using an n-bit secret key k.
1. MAC (m) = ct, where co= 0, and c = c-1m, E(m) for 1 ≤ i ≤t.
2. MACk (m) Ek(H(m)).
=
Are any of these MAC schemes secure? Justify your answer and clearly state any assumptions you
make.
Transcribed Image Text:Exercise 2 (MAC schemes derived from block ciphers ( Let E denote the family of encryption functions for a block cipher where plaintext blocks, ciphertext blocks, and keys are each n = 80 bits in length. Let H: {0,1} {0, 1}" be a hash function. Assume that plaintext messages m all have bit-lengths that are multiples of n; we write m = (m₁, m₂,...,m), i.e. m is composed of t blocks m, of n bits each. Consider the following MAC schemes, each using an n-bit secret key k. 1. MAC (m) = ct, where co= 0, and c = c-1m, E(m) for 1 ≤ i ≤t. 2. MACk (m) Ek(H(m)). = Are any of these MAC schemes secure? Justify your answer and clearly state any assumptions you make.
Expert Solution
trending now

Trending now

This is a popular solution!

steps

Step by step

Solved in 2 steps

Blurred answer
Recommended textbooks for you
Computer Networking: A Top-Down Approach (7th Edi…
Computer Networking: A Top-Down Approach (7th Edi…
Computer Engineering
ISBN:
9780133594140
Author:
James Kurose, Keith Ross
Publisher:
PEARSON
Computer Organization and Design MIPS Edition, Fi…
Computer Organization and Design MIPS Edition, Fi…
Computer Engineering
ISBN:
9780124077263
Author:
David A. Patterson, John L. Hennessy
Publisher:
Elsevier Science
Network+ Guide to Networks (MindTap Course List)
Network+ Guide to Networks (MindTap Course List)
Computer Engineering
ISBN:
9781337569330
Author:
Jill West, Tamara Dean, Jean Andrews
Publisher:
Cengage Learning
Concepts of Database Management
Concepts of Database Management
Computer Engineering
ISBN:
9781337093422
Author:
Joy L. Starks, Philip J. Pratt, Mary Z. Last
Publisher:
Cengage Learning
Prelude to Programming
Prelude to Programming
Computer Engineering
ISBN:
9780133750423
Author:
VENIT, Stewart
Publisher:
Pearson Education
Sc Business Data Communications and Networking, T…
Sc Business Data Communications and Networking, T…
Computer Engineering
ISBN:
9781119368830
Author:
FITZGERALD
Publisher:
WILEY