Efficient multicast stream authentication for the fully adversarial network model

International Journal of Security and Networks

Volumn 2, Issue 3-4, 2007, Pages 175-191

  Tartary, Christophe ^a   Wang, Huaxiong ^b  

^a MACQUARIE UNIVERSITY   (Australia)

^b NANYANG TECHNOLOGICAL UNIVERSITY   (Singapore)

Author keywords

Reed Solomon codes; signature dispersion; stream authentication; THF; trapdoor hash function

Indexed keywords

EID: 85016433011     PISSN: 17478405     EISSN: 17478413     Source Type: Journal    
DOI: 10.1504/ijsn.2007.013172     Document Type: Article

References (37)

1. Al-Ibrahim, M. and Pieprzyk, J. (2001) ‘Authenticating multicast streams in lossy channels using threshold techniques’, ICN 2001, July, Lecture Notes in Computer Science, Vol. 2094, pp.239–249.
2. Challal, Y., Bettahar, H. and Bouabdallah, A. (2004) ‘A taxonomy of mu▒lticast data origin authentication: issues and solutions’, IEEE Communications Surveys and Tutorials, Vol. 6, No. 3, pp.34–57.
3. Contini, S., Lenstra, A.K. and Steinfeld, R. (2006) ‘VSH: an efficient and provable collision resistant hash function’, Advances in Cryptology – Eurocrypt’06, May, Lecture Notes in Computer Science, Vol. 4004, pp.165–182.
4. Contini, S. and Steinfeld, R. (2006) Private Communication, February.
5. Dai, W. (2004) ‘Crypto++ 5.2.1 benchmarks’, July, Available at: http://www.eskimo.com/~weidai/benchmarks.html.
6. Even, S., Goldreich, O. and Micali, S. (1989) ‘On-line/off-line digital signatures’, Advances in Cryptology – Crypto’89, August, Lecture Notes in Computer Science, Vol. 435, pp.263–277.
7. Fu, J.C. and Lou, W.Y.W. (2003) Distribution Theory of Runs and Patterns and Its Applications, World Scientific Publishing.
8. Gao, C. and Yao, Z. (2005) ‘How to authenticate real time streams using improved online/offline signatures’, Fourth International Conference on Cryptology and Network Security, December, Lecture Notes In Computer Science, Vol. 3810, pp.134—146.
9. Gennaro, R. and Rohatgi, P. (1997) ‘How to sign digital streams’, Advances in Cryptology – Crypto’97, August, Lecture Notes in Computer Science, Vol. 1294, pp.180–197.
10. Golle, P. and Modadugu, N. (2001) ‘Authenticating streamed data in the presence of random packet loss’, NDSS 2001, February, Internet Society, pp.13–22.
11. Guruswami, V. and Sudan, M. (1999) ‘Improved decoding of Reed-Solomon and algebraic-geometric codes’, IEEE Transactions on Information Theory, Vol. 45, No. 6, pp.1757–1767.
12. Guruswami, V. (2004) List Decoding of Error-Correcting Codes, Springer-Verlag.
13. Karlof, C., Sastry, N., Li, Y., Perrig, A. and Tygar, J.D. (2004) ‘Distillation codes and applications to DoS resistant multicast authentication’, Eleventh Network and Distributed Systems Security Symposium (NDSS), February.
14. Lysyanskaya, A., Tamassia, R. and Triandopoulos, N. (2003) ‘Multicast authentication in fully adversarial networks’, IEEE Symposium on Security and Privacy, November.
15. MacWilliams, F.J. and Sloane, N.J.A. (1997) The Theory of Error-Correcting Codes, North-Holland.
16. Menezes, A.J., van Oorschot, P.C. and Vanstone, S.A. (1996) Handbook ofApplied Cryptography, CRC Press.
17. Merkle, R. (1989) ‘A certified digital signature’, Advances in Cryptology – Crypto’89, August, Lecture Notes in Computer Science, Vol. 435, pp.218–238.
18. Miner, S. and Staddon, J. (2001) ‘Graph-based authentication of digital streams’, IEEE Symposium on Security and Privacy, May, pp.232–246.
19. Pannetrat, A. and Molva, R. (2002) Authenticating Real Time Packet Streams and Multicasts, July.
20. Park, J.M., Chong, E.K.P. and Siegel, H.J. (2003) ‘Efficient multicast stream authentication using erasure codes’, ACM – TISSEC, Vol. 6, No. 2, pp.258–285.
21. Park, J.M., Chong, E.K.P. and Siegel, H.J. (2002) ‘Efficient multicast packet authentication using signature amortization’, IEEE Symposium on Security and Privacy, May, pp.227–240.
22. Park, Y. and Cho, Y. (2004) ‘The eSAIDA stream authentication scheme’, ICCSA, April, pp.799–807.
23. Paxson, V. (1999) ‘End-to-end Internet packet dynamics’, IEEE/ACM Transactions on Networking, June, pp.277–292.
24. Perrig, A., Canetti, R., Tygar, J.D. and Song, D. (2000) ‘Efficient authentication and signing of multicast streams over lossy channels’, IEEE Symposium on Security and Privacy, May, pp.56–73.
25. Perrig, A. and Tygar, J.D. (2003) Secure Broadcast Communication in Wired and Wireless networks, Kluwer Academic Publishers.
26. Pieprzyk, J., Hardjono, T. and Seberry, J. (2003) Fundamentals of Computer Security, Springer.
27. Rabin, M.O. (1989) ‘Efficient dispersal of information for security, load balancing and fault tolerance’, Journal of the Association for Computing machinery, April, Vol. 36, No. 2, pp.335–348.
28. Rohatgi, P. (1999) ‘A compact and fast hybrid signature scheme for multicast packet authentication’, CCS’99, pp.93–100.
29. Shamir, A. and Tauman, Y. (2001) ‘Improved online/offline signature schemes’, Advances in Cryptology – Crypto’01, August, Lecture Notes in Computer Science, Vol. 2139, pp.355–367.
30. Stinson, D.R. (1995) Cryptography: Theory and Practice, CRC Press.
31. Tartary, C. and Wang, H. (2005) ‘Efficient multicast stream authentication for the fully adversarial network’, sixth International Workshop on Information Security Applications, August, Lecture Notes in Computer Science, Vol. 3786, pp.108–125.
32. Wang, X., Yin, Y.L. and Yu, H. (2005) ‘Finding collisions in the full SHA-1’, Advances in Cryptology – Crypto’05, August, Lecture Notes in Computer Science, Vol. 3621, pp.17–36.
33. Wang, X. and Yu, H. (2005) ‘How to break MD5 and other hash functions’, Advances in Cryptology – Eurocrypt’05, May, Lecture Notes in Computer Science, Vol. 3494, pp.19–35.Efficient multicast stream authentication for the fully adversarial network model
34. Wong, C.K. and Lam, S.S. (1999) ‘Digital signatures for flows and multicasts’, IEEE/ACM Transactions on Networking, August, Vol. 7, No. 4.
35. Yajnik, M., Moon, S., Kurose, J. and Towsley, D. (1999) ‘Measurement and modelling of the temporal dependence in packet loss’, IEEE Infocom, IEEE Press, pp.345–352.
36. Since the data stream is large it is divided into fixed-size entities called packets.
37. We call authentication tag the extra information appended to a packet to provide its authenticity.