Carter–Wegman MACs

E224031

Carter–Wegman MACs are a family of message authentication codes that use universal hashing combined with a secret key to provide efficient and provably secure authentication.

All labels observed (3)

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf cryptographic primitive
message authentication code
universal-hash-based MAC
basedOn universal hashing
canBeCombinedWith encryption schemes
category symmetric-key cryptography
contrastWith HMAC
block-cipher-based MACs
definedIn Carter–Wegman MACs self-linksurface differs
surface form: paper "Universal classes of hash functions"
designedFor high-throughput applications
low-latency authentication
forgeryProbability bounded by 1 over size of hash range
goal efficient authentication with minimal assumptions
hasAdvantage parallelizable computation
provable bounds on forgery probability
suitability for long messages
hasProperty computational efficiency
fast hardware implementation
fast software implementation
information-theoretic security under certain assumptions
low computational overhead
provable security
influenced NH-based MAC constructions
UMAC
VMAC
introducedBy J. Lawrence Carter
Mark N. Wegman
introducedIn 1979
oftenImplementedWith polynomial hashing over finite fields
tabulation hashing variants
operatesBy combining hash output with secret key material
hashing message with universal hash function
provides authenticity
integrity protection
message authentication
relatedConcept almost-universal hash family
universal hash family
ε-almost-universal hashing
requires careful key management
unique nonces or one-time keys in some variants
securityDependsOn choice of universal hash family
freshness of one-time pad or finalization key when used
secrecy of key
securityModel adversary with bounded number of forgery attempts
typicalConstruction hash-then-encrypt-tag with one-time pad or stream cipher
usedIn high-speed cryptographic systems
network protocols
storage authentication
uses secret key

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.

Poly1305 belongsToFamily Carter–Wegman MACs
Carter–Wegman MACs definedIn Carter–Wegman MACs self-linksurface differs
this entity surface form: paper "Universal classes of hash functions"
Moni Naor notableWork Carter–Wegman MACs
this entity surface form: Naor–Stockmeyer notion of universal one-way hash functions