| 摘要 |
<p>A message authentication code calculation algorithm having a favorable calculation efficiency and high safety is configured. A value (M) corresponding to communication data is divided into i-pieces of values (p) having m-n-bit length, and among the values, i-1-pieces of values (p) are added with a secret key (k) having n-bit length (S110 to S130). A fixed value (IV1) having n-bit length and a value (p[1]||k[1]) having m-bit length are input to a compressibility function (h) to obtain a value (c[1]) having n-bit length (S140). By sequentially using j=2 to i-1, a value (c[j-1]) having n-bit length and a value (p[j]||k[j]) having m-bit length are input to the compressibility function (h) to obtain a value (c[j]) having n-bit length (S141). A fixed value (IV2) having n-bit length and a value (p[i]||c[i-1]) having m-bit length are input to the compressibility function (h) to obtain a value (c[i]) having n-bit length, and the value (c[i]) is output as a message authentication code of the value (M) (S142, S150).</p> |
