… ’s protected counter sum using block ciphers. Another MAC algorithm designed for lightweight
use is Chaskey [30]. The Chaskey paper includes a block cipher and a permutation mode, …

… We note that currently used MAC algorithms based on … On typical microcontrollers, the key
schedule of these block ciphers … that MAC algorithms based on reduced-round block ciphers …

… Firstly, we present their applications to the block ciphers SHACAL-1, SHACAL-2 and AES.
In particular, we show that the differential-nonlinear attack is applicable to 32-round SHACAL-…

… MACs based on block ciphers, and is divided into two parts. The first part presents new
distinguishers of the MAC construction Alred and its specific instance Alpha-MAC … MAC algorithm …

… -based constructions studied in this paper will be done in the ideal cipher model (ICM):
this means that a block cipher E is drawn uniformly at random from the set of all block ciphers …

… two fast and secure block cipher-based … Block Cipher based Mac: In this paper, we study
this category in more detail. These MACs are usually based on several invocations of a block …

… The block length n and key length k of CBC-MAC are equal to block and key length of the
block cipher … to a multiple of the block length, and then divided into t blocks x1 through xt. The …

… The focus of this paper is on Message Authentication Code (MAC) algorithms. MAC algorithms
… based on an underlying Even-Mansour block cipher, we refer to the original paper [12]. …

… primary MAC algorithms used historically have been CBC-MAC and MAA. CBC-MAC [lo,
111 is derived from the cipher-block chaining (CBC) mode of block ciphers such as DES; some …

… -MAC is an iterated MAC algorithm based on a block cipher. The encryption and decryption
with the block cipher … The block length of the block cipher is denoted with n, hence EK(.) and …