Variable message encryption through blockcipher compression function. (12th October 2016)

• Record Type: Journal Article
• Authors: Chen, Jiageng; Mazumder, Rashed; Miyaji, Atsuko; Su, Chunhua
• Other Names: Xiang Yang guestEditor.; Bertino Elisa guestEditor.; Kutylowski Miroslaw guestEditor.; Plessl Christian guestEditor.; Cong Guojing guestEditor.; Cardoso João M. P. guestEditor.
• Is Part Of: Concurrency and computation. Volume 29:Number 7(2017)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2016-10-12
• Subjects: blockcipher -- collision resistance and preimage resistance -- ideal and weak cipher model -- constrained device; Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.3956
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: A constrained device is an emerging technology that has enormous applications in our daily life such as access control, inventory control, luggage tracking, bar‐code reader, and IoT. However, it has certain drawbacks of low memory and less computing power. Thus, one of the cracking challenges is to provide efficient and secure cryptographic solution for the constrained device in the aspect of security issue. An ( n, n ) blockcipher‐based cryptographic compression function is applicable to provide provable security to the constrained device. Though, there are many constructions of ( n, n ) blockcipher such as MDC‐2, MDC‐4, MJH, Bart‐12, and SKS‐15. However, most of the familiar schemes are not suitable for short and variable message encryption without padding because of their internal structures. Furthermore, the security margin is provided based on blocklength rather than the flexible size of message. In this paper, we present two different ( n, n ) blockcipher compression function schemes. The first scheme (FS) satisfies better efficiency such as less call of blockcipher, less key scheduling, and higher efficiency rate. On the contrary, the second scheme (SS) has upper security bound. Moreover, both of the schemes are suitable for small and variable message encryption (message size = t n | t < 1, n :blocklength), which is handy for the constrained device. The collision and preimage security bound of the FS are O (2 t n /2 ) and O (2 t n ). In addition, the SS's collision resistance and preimage resistance are bounded by O (2 t n ) and O (2 2 t n ). Moreover, the efficiency rate of the proposed two schemes are respectively t and t /3. The numbers of key scheduling are 2 for the constructions of FS and SS. We use two calls of blockcipher in the FS. On the contrary, three calls of blockcipher are used in the SS. Copyright © 2016 John Wiley & Sons, Ltd.