在信息安全的许多实际应用中往往需要同时提供私密性和认证性,通常采用加密模式和消息认证码的组合来实现这一目的,但这种实现方式须对同一消息分加密和认证两阶段进行处理,不仅密钥使用量大,而且效率低下.本文基于CBC加密模式设计了一种新的一阶段加密认证方案OXCBC,能够同时提供私密性和认证性,且仅使用一个密钥和一个Nonce,与同类型的加密认证方案相比具有较高的效率.在分组密码是强伪随机置换的假设下,证明了该方案的认证性.%In many practical applications of information security,an authenticated-encryption scheme is often constructed by appropriately combining an encryption scheme and a message authentication code. Using this scheme, the same message must be deal with in two-pass,not only using two keys,but also having low efficiency. Based on CBC mode, we propose a new one-pass authenticated encryption mode OXCBC, which provides privacy and authenticity simultaneously. OXCBC uses only one key and a nonce and is more efficient than other one-pass authenticated encryption schemes. We prove OXCBC secure,quantifying the adversary' s ability to violate the mode's authenticity in terms of the quality of its block cipher as a strong PRP.
展开▼
