ATR-01-D

Size: px

Start display at page:

Download "ATR-01-D"

みりああきくぼ
6 years ago
Views:

1 (JCMVP) ATR-01-D Cryptographic Algorithm Implementation Testing Requirements

2 HMAC CMAC (SMT) (SLMT) (PGMT) CCM associated data (VADT) (VPT) nonce (VNT) (VTT) GCM/GMAC IV IV IV uniqueness i

3 1, (JCATT)., ,,.,.,.. :... :.,.,. :,.. [6], [7]., :. 1/12

4 ,,.,., :. 3 :.,. JCATT: IUT: JCATT 2/12

5 HMAC CMAC CCM GCM/GMAC 3/12

6 3 3.1 HMAC, CMAC, CCM, GCM/GMAC HMAC HMAC.. (SMT) (SLMT) (PGMT), (ATR-01-C) 3 SMT, SLMT, PGMT CMAC CMAC , HMAC CMACVS[1] SHAVS[2].. (SMT) (SLMT) (PGMT) (SMT) ( ) m. SMT, m/ ,8,16,...,m.,. 4/12

7 (SLMT) , ( ) m. SLMT, m/8., m + 8 i ( Upperbound of SLMT 1), 1 i m/8,. Upperbound of SLMT.,, (PGMT) Seed, outerloop innerloop, MD[0] MD[outerloop-1].,. for (j=0; j<outerloop; j++) { MAC[0] = Seed; MAC[1] = Seed; MAC[2] = Seed; for (i=3; i<innerloop+3; i++) { M[i] = MAC[i-3] MAC[i-2] MAC[i-1]; // MAC[i] = CMAC(M[i], key); } MAC[j] = MAC[i-1]; Seed = MAC[i-1]; OUTPUT MAC[j]; } JCATT,, IUT. JCATT,,, IUT.,,. 5/12

8 3.1.3 CCM CCM, CCMVS[3] associated data (VADT) (VPT) nonce (VNT) (VTT) associated data (VADT) associated data, nonce ( ) associated data,,.,,, nonce, associated data (VPT), nonce ( ), associated data,.,,, nonce, associated data nonce (VNT) nonce, ( ) nonce,, associated data,.,,, nonce, associated data (VTT) 6/12

9 , nonce ( ), associated data,.,,, nonce, associated data ,,, nonce, associated data,. INVALID,,,, nonce, associated data, INVALID., GCM/GMAC GCM/GMAC, GCMVS[4] IV IV IV IV IUT IV, ( ),, AAD(Additional Autheticated Data), IV. IUT Authentication Tag. JCATT, IUT Authentication Tag.,, AAD, IV IV 7/12

10 IUT IV, ( ),, AAD(Additional Autheticated Data). IUT IV, IV, Authentication Tag. JCATT, IUT Authentication Tag, AAD, IUT IV, Authentication Tag. IUT,, AAD,. INVALID,,, AAD, INVALID.,, AAD, IV JCATT ( ),, AAD, IV, Authentication Tag, Authentication Tag., Authentication Tag,, AAD, IV,. INVALID,, Authentication Tag,, AAD, IV, INVALID.,, AAD, IV, IV uniqueness NIST SP800-38D[5] Section 8 IV uniqueness JCATT 8/12

11 4 4.1,, 1,., 4.1, 4.2, : HMAC SHA-256 SHA-1, SHA-224, SHA-256, SHA- 384, SHA ( /2) Upperbound of SLMT PGMT : CMAC AES AES 3-KeyTripleDES 128 AES 128,192, KeyTripleDES , AES 128, 3-KeyTripleDES 64 Upperbound of SLMT PGMT AES AES 3-KeyTripleDES 128 AES 128, 192, KeyTripleDES , AES 128, 3-KeyTripleDES ( ) /12

12 4.3: CCM AES , 192, 256 VADT Associated data VPT VNT nonce , 64, 72, 80, 88, 96, VTT , 48, 64, 80, 96, 112, AES , 192, , 48, 64, 80, 96, 112, ( ) : GCM/GMAC AES , 192, 256 AAD IV IV Authentication Tag , 120, 112, 104, 96, 64, 32 AES , 192, 256 AAD IV Authentication Tag , 120, 112, 104, 96, 64, 32 ( ) /12

13 , , , , , , [1] Sharon S. Keller, The CMAC Validation System (CMACVS), National Institute of Standards and Technology, March 30, [2] L. E. Bassham III, The secure hash algorithm validation system (SHAVS), National Institute of Standards and Technology, July 22, [3] L. E. Bassham III, The CCM validation system (CCMVS), National Institute of Standards and Technology, July 30, [4] Timothy A. Hall, Sharon S. Keller, The Galois/Counter Mode (GCM) and GMAC Validation System (GCMVS), National Institute of Standards and Technology, February 11, [5] Morris Dworkin, Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC, NIST SP D, National Institute of Standards and Technology, November, [6] JCATT, jcmvp/documents/open/jcatt/format/jcatt fileformat d.zip [7] JCATT, documents/open/jcatt/sample/jcatt sample d.zip 11/12

14 ATR-01-D (HMAC-RIPEMD-160 ) (GCM/GMAC ) 12/12

<4D F736F F D20838A B F955C8E8682A982E796DA8E9F914F5F A815B FD B A5F E646F63>

<4D F736F F D20838A B F955C8E8682A982E796DA8E9F914F5F A815B FD B A5F E646F63> 2008 年度版リストガイド ( メッセージ認証コード ) 平成 21 年 3 月独立行政法人情報通信研究機構独立行政法人情報処理推進機構 1 1 1.1............................. 1 1.1.1............................ 1 1.1.2....................... 1 1.1.3...........................