| 摘要 |
<p>Provided are a tag generation device, method and program which are capable of parallel execution, need no precomputation, and are capable of reducing block-cipher calls to the minimum necessary using one block cipher key when a tag to be attached to a message is generated. A tag generation device is provided with: an input means (100) which divides a message into a plurality of blocks; an intermediate chunk hash means (101) to which the blocks included in the message are inputted as an object to be processed, and which, in units of a predetermined number of blocks, using one key, executes encipherment processing and post-processing of encipherment on the blocks in parallel to generate an intermediate output, and designates, as a next object to be processed, a message created by coupling the intermediate output and unprocessed blocks; and a final chunk hash means (102) which, when the number of block in the message or the number of blocks in the message created by coupling the intermediate output and the unprocessed block is a predetermined value or less, generates a tag corresponding to the message.</p> |
