计算机工程与应用 ›› 2009, Vol. 45 ›› Issue (6): 128-130.DOI: 10.3778/j.issn.1002-8331.2009.06.036

• 网络、通信、安全 • 上一篇    下一篇

改进OCB认证功能的工作模式

晁仕德1,张绍兰2,杨义先3   

  1. 1.青海广播电视大学,西宁 810008
    2.山东建筑大学,济南 250101
    3.北京邮电大学,北京 100876
  • 收稿日期:2008-01-07 修回日期:2008-04-15 出版日期:2009-02-21 发布日期:2009-02-21
  • 通讯作者: 晁仕德

Improved operation mode on authenticity of OCB

CHAO Shi-de1,ZHANG Shao-lan2,YANG Yi-xian3   

  1. 1.Qinghai Radio & TV University,Xining 810008,China
    2.Shandong Jianzhu Univerity,Jinan 250101,China
    3.Beijing University of Posts and Telecommunications,Beijing 100876,China
  • Received:2008-01-07 Revised:2008-04-15 Online:2009-02-21 Published:2009-02-21
  • Contact: CHAO Shi-de

摘要: 针对具有认证加密功能的OCB模式在单个密钥下处理大容量的数据时容易产生碰撞,降低其认证功能这一缺陷,提出对OCB认证功能校验和的生成方式的改进方案,降低了在碰撞发生时丢失认证功能的概率,在不改变原方案中速度快、效率高等优势的前提下,提高了OCB模式认证功能在碰撞发生时的安全性。

Abstract: OCB operation mode is an authenticated encryption mode.When it is used to process large amount of data with a single block-cipher key it is easy to find collision so that the mode will lose the authenticity capability with high probability.According to this disadvantage an improved scheme on the check sum of authenticity is proposed to reduce the probability of lossing the authenticated capability.The improved scheme can improve the secutity of authenticated capability when collision occurs yet not affect the speed and efficiency of the original scheme.