next up previous
Next: Pseudorandom functions (PRFs). Up: Proof of Security Previous: Proof of Security

Message Authentication Codes (MACs).

A function family {fk}k∈ (where is the key length, taken to be the security parameter) is a secure MAC family if any adversary A (whose resources are bounded by a polynomial in ) succeeds in the following game only with negligible probability. A random -bit key k is chosen; next A can adaptively choose messages m1,&ldots;,mn and receive the corresponding MAC values fk(m1)&ldots;fk(mn). A succeeds if it manages to forge the MAC, i.e., if it outputs a pair m,t where m≠m1,&ldots;,mn and t=fk(m). See [2] for more details.


next up previous
Next: Pseudorandom functions (PRFs). Up: Proof of Security Previous: Proof of Security

Adrian Perrig
Sat Sep 2 17:01:14 PDT 2000