On Beyond-Birthday-Bound Security: Revisiting the Development of ISO/IEC 9797-1 MACs

Yaobin Shen; Lei Wang

Paper 2018/468

On Beyond-Birthday-Bound Security: Revisiting the Development of ISO/IEC 9797-1 MACs

Yaobin Shen and Lei Wang

Abstract

ISO/IEC 9797-1 is an international standard for block-cipher-based Message Authentication Code (MAC). The current version ISO/IEC 9797-1:2011 specifies six single-pass CBC-like MAC structures that are capped at the birthday bound security. For a higher security that is beyond-birthday bound, it recommends to use the concatenation combiner of two single-pass MACs. In this paper, we reveal the invalidity of the suggestion, by presenting a birthday bound forgery attack on the concatenation combiner, which is essentially based on Joux’s multi-collision. Notably, our new forgery attack for the concatenation of two MAC Algorithm 1 with padding scheme 2 only requires 3 queries. Moreover, we look for patches by revisiting the development of ISO/IEC 9797-1 with respect to the beyond-birthday bound security. More specifically, we evaluate the XOR combiner of single-pass CBC-like MACs, which was used in previous version of ISO/IEC 9797-1.

Note: revised some typos

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Published by the IACR in FSE 2020
Keywords: ISO IEC 9797-1 Beyond Birthday Bound Security XOR Combiner
Contact author(s): yb_shen @ sjtu edu cn
wanglei_hb @ sjtu edu cn
History: 2020-12-30: last of 3 revisions; 2018-05-22: received; See all versions
Short URL: https://ia.cr/2018/468
License: CC BY

BibTeX

@misc{cryptoeprint:2018/468,
      author = {Yaobin Shen and Lei Wang},
      title = {On Beyond-Birthday-Bound Security: Revisiting the Development of ISO/IEC 9797-1 MACs},
      howpublished = {Cryptology ePrint Archive, Paper 2018/468},
      year = {2018},
      note = {\url{https://eprint.iacr.org/2018/468}},
      url = {https://eprint.iacr.org/2018/468}
}