Title
Impact of ANSI X9.24-1: 2009 Key Check Value on ISO/IEC 9797-1: 2011 MACs.
Abstract
ANSI X9.24-1:2009 specifies the key check value, which is used to verify the integrity of the blockcipher key. This value is defined as the most significant bits of the ciphertext of the zero block, and is assumed to be publicly known data for verification. ISO/IEC 9797-1:2011 illustrates a total of ten CBC MACs, where one of these MACs, the basic CBC MAC, is widely known to be insecure. In this paper, we consider the remaining nine CBC MACs and derive the quantitative security impact of using the key check value. We first show attacks against five MACs by taking advantage of the knowledge of the key check value. We then prove that the analysis is tight, in a concrete security paradigm. For the remaining four MACs, we prove that the standard birthday bound still holds even with the presence of the key check value. As a result, we obtain a complete characterization of the impact of using ANSI X9.24-1 key check value with the ISO/IEC 9797-1 MACs.
Year
DOI
Venue
2014
10.1007/978-3-662-46706-0_16
Lecture Notes in Computer Science
Keywords
DocType
Volume
ANSI X9.24-1:2009,Key check value,ISO/IEC 9797-1:2011,CBC MAC,Proof of security
Journal
8540
ISSN
Citations 
PageRank 
0302-9743
0
0.34
References 
Authors
17
2
Name
Order
Citations
PageRank
Tetsu Iwata154550.28
Lei Wang2312.30