| 摘要 |
A message authentication code, MAC, is generated in an electronic circuit, wherein the MAC integrit y protects a data value, PD. A random challenge word, RND, is received from a source that is external to the electronic circuit. A first function G(RND,K) is evaluated that generates a first encrypted value, K', from RND and K, wherein K is a secret key value that is stored on the electronic circuit. A second function F(RND,K) is evaluated that generates a second encrypted value, K'', from RND and K. The MAC is then generated in accordance with MAC = K'' + m<SUB>1</SUB>K' + m<SUB> 2</SUB> K'<SUP>2</SUP> +... + m<SUB>l</SUB> K'<SUP>l</SUP>, wherein m<SUB>1</SUB>, m <SUB>2</SUB>,..., m<SUB>l</SUB> are derived by representing the data value, PD, as an l- tuple of elements in a field, GF(2<SUP>n</SUP>), wherein n is an integer greater than zero. A hardware-efficient arrangement is also disclosed for generating this and other MACs. |
