Question: Let F:K x {0,1} {0,1} be a pseudo-random function. Show that the following con- structions Macl and Mac2 are insecure as message authentication codes on

 Let F:K x {0,1}" {0,1}" be a pseudo-random function. Show that

Let F:K x {0,1}" {0,1}" be a pseudo-random function. Show that the following con- structions Macl and Mac2 are insecure as message authentication codes on a message space M = Uisism{0,1}in, where m is an arbitrary large integer. In each case you need to design an efficient adversary with a high forgery advantage: Macl(KM) M||M2||...MC+M; 200"; for it 1 tol, ZFk(Z-1 M); end for return Ze; Mac2(KM) M||M2||... Me+M; zo{0,1}"; for it 1 tol, Z; + Fr(2-1 M); end for return (Z0, Z_); Let F:K x {0,1}" {0,1}" be a pseudo-random function. Show that the following con- structions Macl and Mac2 are insecure as message authentication codes on a message space M = Uisism{0,1}in, where m is an arbitrary large integer. In each case you need to design an efficient adversary with a high forgery advantage: Macl(KM) M||M2||...MC+M; 200"; for it 1 tol, ZFk(Z-1 M); end for return Ze; Mac2(KM) M||M2||... Me+M; zo{0,1}"; for it 1 tol, Z; + Fr(2-1 M); end for return (Z0, Z_)

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!