关键词: 基于哈希的消息认证码（HMAC）, 混沌映射, hash函数, 伪造攻击

Abstract: The inherent defect of HMAC（Hash-based Message Authentication Code） algorithm is analysed in this paper. The forging attack triggered by HMAC parameters is described as well. Aiming to deal with this problem, a novel HMAC algorithm based on chaotic maps is presented, which can generate HMAC parameter values through chaotic iteration. The approach can ensure the dynamic parameters, as the chaotic system is sensitive to the initial variables and unpredictable to final values. Therefore, it can effectively resist the forging attacks as a result of enhancing HMAC algorithm security performance. Finally, the algorithm simulation and analysis indicate that both designing HMAC algorithm and embedded hash function should meet the security conditions to ensure the security of entire algorithm.

Key words: Hash-based Message Authentication Code（HMAC）, chaotic map, hash function, forging attacks