Cryptology ePrint Archive: Report 2016/525

EWCDM: An Efficient, Beyond-Birthday Secure, Nonce-Misuse Resistant MAC

Benoît Cogliati and Yannick Seurin

Abstract: We propose a nonce-based MAC construction called EWCDM (Encrypted Wegman-Carter with Davies-Meyer), based on an almost xor-universal hash function and a block cipher, with the following properties: (i) it is simple and efficient, requiring only two calls to the block cipher, one of which can be carried out in parallel to the hash function computation; (ii) it is provably secure beyond the birthday bound when nonces are not reused; (iii) it provably retains security up to the birthday bound in case of nonce misuse. Our construction is a simple modification of the Encrypted Wegman-Carter construction, which is known to achieve only (i) and (iii) when based on a block cipher. Underlying our new construction is a new PRP-to-PRF conversion method coined Encrypted Davies-Meyer, which turns a pair of secret random permutations into a function which is provably indistinguishable from a perfectly random function up to at least $2^{2n/3}$ queries, where $n$ is the bit-length of the domain of the permutations.

Category / Keywords: Wegman-Carter MAC, Davies-Meyer construction, nonce-misuse resistance, beyond-birthday-bound security

Original Publication (with major differences): IACR-CRYPTO-2016

Date: received 27 May 2016, last revised 27 May 2016

Contact author: benoitcogliati at hotmail fr, yannick seurin@m4x org

Available format(s): PDF | BibTeX Citation

Note: An abridged version appears in the proceedings of CRYPTO 2016. This is the full version.

Version: 20160529:210816 (All versions of this report)

Short URL:

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]