Advertisement

Analysis of Indirect Message Injection for MAC Generation Using Stream Ciphers

  • Mufeed ALMashrafi
  • Harry Bartlett
  • Leonie Simpson
  • Ed Dawson
  • Kenneth Koon-Ho Wong
Part of the Lecture Notes in Computer Science book series (LNCS, volume 7372)

Abstract

This paper presents a model for generating a MAC tag with a stream cipher using the input message indirectly. Several recent proposals represent instances of this model with slightly different options. We investigate the security of this model for different options, and identify cases which permit forgery attacks. Based on this, we present a new forgery attack on version 1.4 of 128-EIA3. Design recommendations to enhance the security of proposals following this general model are given.

Keywords

MAC Stream ciphers Forgery attacks Grain-128a Sfinks 128-EIA3 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Ågren, M., Hell, M., Johansson, T., Meier, W.: Grain-128a: a new version of grain-128 with optional authentication. International Journal of Wireless and Mobile Computing 5(1), 48–59 (2011)CrossRefGoogle Scholar
  2. 2.
    Braeken, A., Lano, J., Mentens, N., Preneel, B., Verbauwhede, I.: SFINKS: A Synchronous Stream Cipher for Restricted Hardware Environments. eSTREAM, ECRYPT Stream Cipher Project, Report 2005/026 (2005), http://www.ecrypt.eu.org/stream
  3. 3.
    ETSI/SAGE: Specification of the 3GPP Confidentiality and Integrity Algorithms 128-EEA3 & 128-EIA3. Document 4: Design and Evaluation Report. Tech. rep., ETSI (August 11, 2010)Google Scholar
  4. 4.
    ETSI/SAGE: Specification of the 3GPP Confidentiality and Integrity Algorithms 128-EEA3 & 128-EIA3. Document 1: 128-EEA3 and 128-EIA3 Specification. Tech. rep., ETSI (January 4, 2011), http://gsmworld.com/documents/EEA3_EIA3_specification_v1_5.pdf
  5. 5.
    ETSI/SAGE: Specification of the 3GPP Confidentiality and Integrity Algorithms 128-EEA3 & 128-EIA3. Document 2: ZUC Specification. Tech. rep., ETSI (January 4, 2011), http://gsmworld.com/documents/EEA3_EIA3_ZUC_v1_5.pdf
  6. 6.
    European Network of Excellence for Cryptology: The eSTREAM Project (2008), http://www.ecrypt.eu.org/stream/index.html
  7. 7.
    Fuhr, T., Gilbert, H., Reinhard, J.-R., Videau, M.: Analysis of the Initial and Modified Versions of the Candidate 3GPP Integrity Algorithm 128-EIA3. In: Miri, A., Vaudenay, S. (eds.) SAC 2011. LNCS, vol. 7118, pp. 230–242. Springer, Heidelberg (2012)CrossRefGoogle Scholar
  8. 8.
    Golić, J.D.: Modes of Operation of Stream Ciphers. In: Stinson, D.R., Tavares, S. (eds.) SAC 2000. LNCS, vol. 2012, pp. 233–247. Springer, Heidelberg (2001)CrossRefGoogle Scholar
  9. 9.
    Hell, M., Johansson, T., Meier, W.: Grain: a stream cipher for constrained environments. International Journal of Wireless and Mobile Computing 2(1), 86–93 (2007)CrossRefGoogle Scholar
  10. 10.
    Lai, X., Rueppel, R., Woollven, J.: A Fast Cryptographic Checksum Algorithm Based on Stream Ciphers. In: Zheng, Y., Seberry, J. (eds.) AUSCRYPT 1992. LNCS, vol. 718, pp. 339–348. Springer, Heidelberg (1993)CrossRefGoogle Scholar
  11. 11.
    Nakano, Y., Cid, C., Fukushima, K., Kiyomoto, S.: Analysis of Message Injection in Stream Cipher-Based Hash Functions. In: Lopez, J., Tsudik, G. (eds.) ACNS 2011. LNCS, vol. 6715, pp. 498–513. Springer, Heidelberg (2011)CrossRefGoogle Scholar
  12. 12.
    Nakano, Y., Kurihara, J., Kiyomoto, S., Tanaka, T.: On a construction of stream-cipher-based hash functions. In: Proceedings of the 2010 International Conference on Security and Cryptography (SECRYPT), pp. 1–11. IEEE (2010)Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2012

Authors and Affiliations

  • Mufeed ALMashrafi
    • 1
    • 2
  • Harry Bartlett
    • 1
    • 2
  • Leonie Simpson
    • 1
    • 2
  • Ed Dawson
    • 1
    • 2
  • Kenneth Koon-Ho Wong
    • 1
  1. 1.Information Security InstituteQueensland University of TechnologyBrisbaneAustralia
  2. 2.Science and Engineering FacultyQueensland University of TechnologyBrisbaneAustralia

Personalised recommendations