一类同态消息认证码方案的抗“多文件”攻击安全性  

The Security of Multi-generation Attack for a Kind of Homomorphic Message Code Scheme

作　　者：王中[1] 常金勇 WANG Zhong;CHANG Jin-yong(Department of Computer Science,Changzhi University,Changzhi 046011,China;School of Information and Control Engineering,Xi'an University of Architecture and Technology,Xi'an 710055,China;School of Mathematical Sciences,Peking University,Beijing 100871,China)

机构地区：[1]长治学院计算机系,长治046011 [2]西安建筑科技大学信息与控制工程学院,西安710055 [3]北京大学数学科学学院,北京100871

出　　处：《科学技术与工程》2019年第16期200-204,共5页Science Technology and Engineering

基　　金：国家自然科学基金(61602061);中国博士后科学基金(一等)面上项目(2017M610021);长治学院2017年度校级科研项目(ZC2017005);山西省教育科学“十三五”规划(GH-18098);陕西省自然科学基础研究计划面上项目(2016jm6031)资助

摘　　要：2016年,一类单文件情形下“秘密”改变标签位置的同态认证码(message authentication code,MAC)方案,也就是EMR方案得到了开发和关注。考虑EMR方案的“多文件”攻击安全性,首先,对原始的EMR方案成功地进行了“多文件”攻击;其次,利用密码学中的拟随机函数(pseudorandom Functions,PRF)对不同的“文件名”进行转换,从而将原始EMR方案修改为新的方案,对修改后的方案,证明了如果PRF是一个安全的函数,则修改所得到的新方案可以抵抗“多文件”攻击;最后,对于两个方案的效率进行了比较。由于所做的修改仅仅是在原方案的基础上添加了拟随机函数,所以两个方案在具体实现时的效率差别不大。A homomorphic message authentication code (MAC) scheme (EMR scheme,for short) was designed for the case of single-generation and has the property of “secretly” changing positions of tags.The multi-generation security of EMR scheme was considered.First,the original EMR scheme was attacked with the multi-generation.Then,the pseudorandom function (PRF) of cryptography was used to transform “filename” and hence a new scheme was obtained,which was proved to be secure against “multi-generation” attack if the PRF was also secure.Finally,the performances of the EMR and our scheme were analyzed.Since the only changes lie in PRF into the original scheme,the differences for the two schemes are very little.

关 键 词：同态认证码(MAC)方案 “多文件”攻击 EMR方案 网络编码 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]