A message authentication code (MAC) based on using a hash function with the secret prefix $H(k||m)$ technique goes back to two independent sources according to Tsudik's article on 1992;

  1. S. Crocker, S. Kent, Private Communication, December 1990.
  2. J . Galvin, K. McCloghrie, J. Davin, Secure Management of SNMP Networks Proceedings of IFIP Integrated Network Management Symposium, April 1991

The first real attack on the Merkle-Damgard construction is executed on the Flicker API

Tsudik also mentioned the length extension attacks on the same article as;

Another curious property of the secret prefix method is its vulnerability to padding attacks5 (A padding attack is successful when the intruder is able to either prepend or append extraneous data to an authentic message and pass the resulting message off as genuine .)

and footnote 5 on the article is "This vulnerability was discovered by Dave Solo and Steve Kent"

This is not a real reference in the academic sense. When we look at the A. Menezes, P. van Oorschot, and S. Vanstone's book, they wrote this ( referring 2. reference of the Tsudik );

Galvin, McCloghrie, and Davin suggest addressing the message extension problem in the secret suffix method by using a prepended length field (this requires two passes over the message if the length is not known a priori).

I couldn't find the article of Galvin et. al, only the patent application, to see that where they were referring. So;

  • What is the original paper of the length extension attack to refer academically?
  • 2
    $\begingroup$ The Galvin, McCloghrie, Davin paper appears to exist at least. But there does not seem to be any electronic version available anywhere. A handful of physical copies do seem to exist. I may be able to get hold of a copy, but I would need to check with the library whether that's currently possible. $\endgroup$
    – Maeher
    Jan 12 at 10:44
  • $\begingroup$ @Maeher I see. Thanks. $\endgroup$
    – kelalaka
    Jan 12 at 10:46
  • $\begingroup$ @Maeher any progress? $\endgroup$
    – kelalaka
    Feb 8 at 20:01
  • $\begingroup$ In a way yes. A hard copy of the paper is apparently waiting for me at the library. For reasons I can't fathom interlibrary loan apparently does not allow them to send me a digital copy. But given the pandemic I don't know when I will be able to actually get to the library. $\endgroup$
    – Maeher
    Feb 9 at 7:53
  • $\begingroup$ @Maeher thanks. $\endgroup$
    – kelalaka
    Feb 9 at 8:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.