Distinguishing Attack and Second-Preimage Attack on the CBC-like MACs

Keting Jia; Xiaoyun Wang; Zheng Yuan; Guangwu Xu

Paper 2008/542 Original: eprint.iacr.org/2008/542 ↗

Distinguishing Attack and Second-Preimage Attack on the CBC-like MACs

Keting Jia

Xiaoyun Wang

Zheng Yuan

Guangwu Xu

Abstract

In this paper, we first present a new distinguisher on the CBC-MAC based on a block cipher in Cipher Block Chaining (CBC) mode. It can also be used to distinguish other CBC-like MACs from random functions. The main results of this paper are on the second-preimage attack on CBC-MAC and CBC-like MACs include TMAC, OMAC, CMAC, PC-MAC and MACs based on three-key encipher CBC mode. Instead of exhaustive search, this attack can be performed with the birthday attack complexity.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint.
History: 2009-01-13: last updated; 2008-12-28: published
Short URL: https://ia.cr/2008/542
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2008/542,
      author = {Keting Jia and Xiaoyun Wang and Zheng Yuan and Guangwu Xu},
      title = {Distinguishing Attack and Second-Preimage Attack on the CBC-like MACs},
      howpublished = {Cryptology {ePrint} Archive, Paper 2008/542},
      year = {2008},
      url = {https://eprint.iacr.org/2008/542}
}