Cryptanalysis of Message Authentication Codes

This paper gives a survey of attacks on Message Authentication Codes (MACs). First it defines the required security properties. Next it describes generic forgery and key recovery attacks on MACs. Subsequently an overview is presented of most MAC constructions and on attacks on these algorithms. The MACs described include CBC-MAC and its variants, the MAC algorithms derived from cryptographic hash functions, and the ISO banking standard Message Authenticator Algorithm, also known as MAA. ispartof: pages:55-65 ispartof: Lecture Notes in Computer Science vol:1396 pages:55-65 ispartof: ISW 1997 location:JAPAN, JAPAN ADV INST SCI & TECHNOL, ISHIKAWA date:17 Sep - 19 Sep 1997 status: published