Trading off strength and performance in network authentication: Experience with the ACSA project

Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX 2000

Volumn 1, Issue , 2000, Pages 127-139

  Adcock, J M ^a   Balenson, D M ^a   Carman, D W ^a   Heyman, M ^a   Sherman, A T ^a,b  

^a Network Associates Inc   (United States)

^b UNIVERSITY OF MARYLAND   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION; COMMERCE; HIGH SPEED NETWORKS;

BASIC GROUPS; DATA AUTHENTICATION; HIGHER SPEED; INNER FUNCTIONS; IPSEC PROTOCOL; MESSAGE AUTHENTICATION CODES; NEW APPROACHES; STRENGTH AND PERFORMANCE;

CRYPTOGRAPHY;

EID: 84961710277     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2000.824971     Document Type: Conference Paper

References (24)

1. S. Abbott, "Cryptographic interfaces: supporting 100mbps and beyond," Proceedings of the 1999 RSA Data Security Conference.
2. D. Balenson, D. Carman, M. Heyman, and A. Sherman, "Adaptive Cryptographically Synchronized Authentication (ACSA): Model and analysis," Revision 1.0 (December 7, 1998). 53pages.
3. M. Bellare, R. Canetti, and H. Krawczyk, "Keying hash functions for message authentication" in Advances in Cryptology: Proceedings of CRYPTO '96, LNCS 1109, N. Koblitz, ed., Springer-Verlag (1996), 1-15.
4. J. Black, S. Halevi, H. Krawczyk, T. Krovetz, and P. Rogaway, "UMAC: Fast and secure message authentication" in Advances in Cryptology: Proceedings of CRYPTO '99, LNCS 1666, M. Wiener, ed., Springer-Verlag (1999), 216-233.
5. A. Bosselaers, "Even faster hashing on the Pentium," presented at the rump session of Eurocrypt '97.
6. D. Carman, J. Adcock, D. Balenson, M. Heyman, and A. Sherman, "Adaptive Cryptographically Synchronized Authentication (ACSA): Prototype system design," Revision 1.0 (May 12, 1999). 56pages.
7. DARPA ITO ACSA Web Page, http://www.darpa.mil/ito/psum1998/G374-0.html.
8. M. Etzel, S. Patel, Z. Ramzan, "Square hash: Fast message authentication via optimized universal hash functions," in Advances in Cryptology: Proceedings of CRYPTO '99, LNCS 1666, M. Wiener, ed., Springer-Verlag (1999), 234-251.
9. V. Gligor, and P. Donescu, "Integrity-aware PCBC encryption schemes," Security Protocols - 7th International Workshop, LNCS, B. Chrisianson, B. Crispo, and M. Roe, ed., Cambridge, U.K., Springer-Verlag (April 1999).
10. S. Halevi and H. Krawczyk, "MMH: Software message authentication in the Gbit/second rates" in Fast Software Encryption, LNCS 1233, Eli Biham, ed., Springer-Verlag (1997), 172-189.
11. D. Harkins and D. Carrel, "The Internet key exchange (IKE)," RFC 2409 (November 1998). ftp://ftp.isi.edu/in-notes/rfc2409.txt.
12. S. Kent and R. Atkinson, "IP authentication header," RFC 2402 (November 1998). ftp://ftp.isi.edu/in-notes/rfc2402.txt.
13. S. Kent and R. Atkinson, "Security architecture for the internet protocol," RFC 2401 (November 1998). ftp://ftp.isi.edu/in-notes/rfc2401.txt.
14. H. Krawcyzk, M. Bellare, and R. Canetti, "HMAC: Keyed-hashing for message authentication," RFC 2104 (February 1997). ftp://ftp.isi.edu/in-notes/rfc2104.txt.
15. C. Madson and R. Glenn, "The use of HMAC-MD5-96 within ESP and AH," RFC 2403 (November 1998). ftp://ftp.isi.edu/in-notes/rfc2403.txt.
16. C. Madson and R. Glenn, "The use of HMAC-SHA-1-96 within ESP and AH," RFC 2404 (November 1998). ftp://ftp.isi.edu/in-notes/rfc2404.txt.
17. T. Matthews, "Suggestions for random number generation," RSA Laboratries' Bulletin, No. 1 (January 22, 1996). 4 pages. http://www.rsa.com/rsalabs/html/bulletins.html.
18. E. Nahum, S. O'Malley, H. Orman, and R. Schroeppel, "Towards high performance cryptographic software," Technical Report TR95-04, Dept. Computer Science, University of Arizona (1995).
19. P. Rogaway, "Bucket hashing and its application to fast message authentication" in Advances in Cryptology: Proceedings of CRYPTO '95, LNCS 963, D. Coppersmith, ed., Springer-Verlag (1995), 313-328.
20. P. Rogaway, "Design and analysis of message authentication codes," Proceedings of the 1996 RSA Data Security Conference (January 19, 1996).
21. P. Rogaway, "Bucket hashing and its application to fast message authentication," Journal of Cryptology, Vol. 12, No. 2 (Spring 1999).
22. V. Shoup, "On fast and provably secure message authentication based on universal hashing," Advances in Cryptology: Proceedings of CRYPTO '96, LNCS 1109, N. Koblitz, ed., Springer-Verlag (1996), 74-85.
23. J. Touch, "Report on MD5 performance," RFC 1810 (June 1995). 7 pages. http://www.isi.edu/touch/pubs/rfc1810.html.
24. M. Wegman and L. Carter, "New hash functions and their use in authentication and set equality," Journal of Computer and System Sciences, Vol. 22 (1981), 265-279.