블록암호 기반 키유도함수의 증명가능 안전성
Provable Security of Key Derivation Functions Based on the Block Ciphers
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Key derivation functions are used within many cryptographic systems in order to generate various keys from a fixed short key string. In this paper we survey a state-of-the-art in the key derivation functions and wish to examine the soundness of the functions on the view point of provable security. Especially we focus on the key derivation functions using pseudorandom functions which are recommended by NIST recently, and show that the variant of Double-Pipeline Iteration mode using pseudorandom permutations is a pseudorandom function. Block ciphers can be regarded as practical primitives of pseudorandom permutations.
Abstract
Key derivation functions are used within many cryptographic systems in order to generate various keys from a fixed short key string. In this paper we survey a state-of-the-art in the key derivation functions and wish to examine the soundness of the functions on the view point of provable security. Especially we focus on the key derivation functions using pseudorandom functions which are recommended by NIST recently, and show that the variant of Double-Pipeline Iteration mode using pseudorandom permutations is a pseudorandom function. Block ciphers can be regarded as practical primitives of pseudorandom permutations.
참고문헌 (18)
- ISO, "IEC", Information technology - Security techniques - Encryption algorithms - Part 2: Asymmetric ciphers, 2004
- "IEEE P1363 Standard Specifications for Public Key Cryptography", IEEE, ~ (1993)
- RSA Laboratories, "PKCS #1 v2.1: RSA Encryption Standard", ~ (2002)
- "ANSI X9.42-2003 Agreement of Symmetric Keys Using Discrete Logarithm Cryptography", American National Standards Institute, ~ (2003)
- "NIST Special Publication 800-56A Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography", National Institute of Standards and Technology, ~ (2007)
- "IEEE Standard for Information technology—Telecommunications and information exchange between systems—Local and metropolitan area networks—Specific requirements Part 11:Wireless LAN Medium Access Control(MAC)and Physical Layer(PHY)specifications Amendment 6:Medium Access Control(MAC)Security Enhancements", IEEE 802.11i, ~ (2004)
- RSA Laboratories, "PKCS #5 v2.1: Password-Based Cryptography Standard", ~ (2006)
- Bruce Schneier, "Applied Cryptography - Protocols, Algorithms and Source Code in C, second edition" (1995), John Wiley
- "3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; 3G Security; Specification of the MILENAGE Algorithm Set; An example algorithm set for the 3GPP authentication and key generation functions f1,f1*,f2,f3,f4,f5 and f5*; Document 5:Summary and results of design and evaluation", 3GPP TR 35.909 v8.0.0, ~ (2008)
- "IEEE Standard for Information technology—Telecommunications and information exchange between systems—Local and metropolitan area networks—Specific requirements Part 15.1:Wireless medium access control(MAC)and physical layer(PHY)specifications for wireless personal area networks(WPANs)", IEEE 802.15.1TM, ~ (2002)
- "Recommendation for Key Derivation Using Pseudorandom Functions(Revised)", NIST Special Publication 800-108, SP 800-108, ~ (2009)
- C.Adams, "On the security of key derivation functions", LNCS 3225, pp.134~145 (2004), Springer-Verlag
- H.Gilbert, "The security of One-Block-to-Many modes of operation", FSE 2003,LNCS 2887, pp.376~395 (2003)
- H.Krawczyk, "HMAC:Keyed-Hashing for Message Authentication", RFC2104, ~ (1997)
- "Specification for the ADVANCED ENCRYPTION STANDARD(AES)", Federal Information Processing Standards Publication 197, ~ (2001)
- J.Massey, "Nomination of SAFER+ as Candidate Algorithm for the Advanced Encryption Standard(AES)", NIST AES Proposal, ~ (1998)
- J.Patarin, "New results on pseudorandom permutation generators based on the DES scheme", Advances in Cryptology-CRYPTO'91,LNCS 576, pp.301~316 (1992)
- S.Vaudenay, "On Provable Security for Conventional Cryptography", Proc.ICISC ’99,invited lecture,LNCS 1787, pp.1~16 (2000)