MESSAGE AUTHENTICATION CODE GENERATING DEVICE, MESSAGE AUTHENTICATION CODE VERIFICATION DEVICE, AND MESSAGE AUTHENTICATION SYSTEM

• US 20070245147A1
• Filed: 04/13/2007
• Published: 10/18/2007
• Est. Priority Date: 04/17/2006
• Status: Abandoned Application

• Current Assignee: Renesas Electronics Corporation
• Original Assignee: Renesas Electronics Corporation
• Inventors: Okeya, Katsuyuki
• Application Number:
  US11/734,807
• Publication Number:
  US 20070245147A1
• Time in Patent Office: Days
• US Class Current: 713/181
• CPC Class Codes: H04L 2209/20 Manipulating the length of blocks of bits, e.g. padding or block truncation
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A message authentication technology capable of securing against side channel attack is provided. In a message authentication code generating device for calculating a message authentication code for a message from the message, a process in which disturbance information is generated from a temporary use numerical value, a process in which a conversion message is calculated from the message; and a process in which the message authentication code is calculated from the disturbance information and the conversion message are performed. In the process of calculating the message authentication code, process information is disturbed or concealed by the disturbance information. Therefore, the message authentication which is secure against side channel attack can be realized.

Claims

1. A message authentication code generating device in which a message authentication code for a message is calculated from the message, comprising:

a disturbance information generating unit which performs a process of generating disturbance information by using a temporary use numerical value;

a message converting unit which performs a process of calculating conversion messages from the message; and

an authentication code calculating unit which performs a process of calculating the message authentication code from the disturbance information and the conversion messages.

2. The message authentication code generating device according to claim 1,

wherein the process of generating the disturbance information performed by the disturbance information generating unit includes a process step of encrypting the temporary use numerical value.

3. The message authentication code generating device according to claim 2,

wherein the process of calculating the conversion messages performed by the message converting unit includes a process step of dividing the message into message blocks and encrypting the message blocks.

4. The message authentication code generating device according to claim 3,

wherein the process of calculating the message authentication code performed by the message authentication code calculating unit is a process using OMAC.

5. The message authentication code generating device according to claim 3,

wherein the process of calculating the message authentication code performed by the message authentication code calculating unit is a process using PMAC.

6. The message authentication code generating device according to claim 2,

wherein the process of calculating the message authentication code performed by the authentication code calculating unit comprises process steps of:

generating first intermediate data from the conversion message;

converting the first intermediate data by using the disturbance information to generate second intermediate data;

generating third intermediate data from the second intermediate data;

converting the third intermediate data by using the disturbance information to generate fourth intermediate data; and

calculating the message authentication code from the fourth intermediate data.

7. The message authentication code generating device according to claim 4,

wherein the process of calculating the message authentication code performed by the authentication code calculating unit includes a chain processing of a process step in which an addition by exclusive-OR or arithmetic addition for acting the disturbance information and an encryption of the output result thereof are performed for each of the conversion messages by the message blocks.

8. The message authentication code generating device according to claim 5,

wherein the process of calculating the message authentication code performed by the authentication code calculating unit includes a chain processing of a process step in which a first addition by exclusive-OR or arithmetic addition for acting multiplication results (γ

_jL) in a binary form between the Gray code and encryption results for 0, an encryption of the output result thereof, and a second addition by exclusive-OR or arithmetic addition for acting the disturbance information are performed for each of the conversion messages by the message blocks.

9. A message authentication code verification device for verifying authenticity of a message by using the message and a first message authentication code used for verifying the authenticity of the message, executing process steps of:

generating a second message authentication code from the message and a temporary use numerical value; and

obtaining a result by comparing the first message authentication code and the second message authentication code,

wherein the process step of generating the second message authentication code includes process steps of;

generating disturbance information by using the temporary use numerical value;

calculating a conversion message from the message; and

calculating the second message authentication code from the disturbance information and the conversion message.

10. A message authentication system, comprising:

a message authentication code generating device for calculating a first message authentication code for a message from the message; and

a message authentication code verification device for verifying authenticity of the message based on the message and the first message authentication code for verifying the authenticity of the message sent from the message authentication code generating device,

wherein, as the process for generating the first message authentication code from the message and a temporary use numerical value, the message authentication code generating device executes process steps of;

generating disturbance information by using the temporary use numerical value;

calculating a conversion message from the message; and

calculating the first message authentication code from the disturbance information and the conversion message, and

as the process for generating a second message authentication code from the message and the temporary use numerical value, the message authentication code verification device executes process steps of;

generating the disturbance information by using the temporary use numerical value;

calculating the conversion message from the message; and

calculating the second message authentication code from the disturbance information and the conversion message, and

a process of obtaining a result by comparing the first message authentication code and the second message authentication code is performed.