1
$\begingroup$

If I want to check the integrity of some piece of data, I can check that a cryptographic hash of the data corresponds to a known hash.

Alternatively I can also check a digital signature on the data and see that it corresponds to a known authority for the data. I can use certificates or not for this.

I can also verify a MAC for the data using a secret key.

Lastly I can decrypt the data using an authenticating cipher mode using a secret key that is known only by me and the known authority for the data.

In these three cases I have some key or hash material. What is the word that correctly describes the material I have?

Improve this question
$\endgroup$
2
  • 2
    $\begingroup$ Another way is to verify a MAC (which is not necessarily part of an authenticating cipher mode). $\hspace{.89 in}$ $\endgroup$
    – user991
    Mar 12, 2014 at 12:09
  • $\begingroup$ True, I'll update the question. $\endgroup$
    – user239558
    Mar 12, 2014 at 13:33

1 Answer 1

Reset to default
2
$\begingroup$

In the case of a digital signature, it was signed with a private key, and you are verifying it with the private key's public key the bits you are authenticating against are the input (encrypted or not) and the digital signature, which is an asymmetrically encrypted cryptographic hash of the input.

For an authenticating cipher mode such as OCB or GCM, the key is simply the cipher key, it is the same used for both authentication and encryption. GCM internally generates a Hash key that is the internal key that performs authentication, and is unique to each cipher key. Other dual key modes exist, in this case the key is generally called the MAC key. Most authenticating cipher modes also require a nonce to be unique and processed as part of either authentication or encryption (or both). The bits you are authenticating against are the inputs (encrypted or not, or both) and the authentication tag.

When using a MAC only construction such as CMAC (OMAC) or HMAC, the key is once again generally called the MAC key, the bits you are authenticating against are the input (encrypted or not) and the message authentication code.

MAC keys, depending on the algorithm, may further be broken down into subkeys, or may be one of the generated subkeys of a larger master key.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.