Message authentication code algorithm for IP-SEC

摘要

Authentication is included as a necessary security feature in IPv6. Message Authentication Code (MAC) algorithms are used as authenticating mechanisms in IP-Sec protocol Authentication Header (AH) to provide data origin authentication and integrity protection. The MAC bit size requirement of the authentication field is 96 bits. The currently used MAC algorithms produces MAC of larger size and the results are truncated to 96 bits to suit the requirement of the AH. This results in additional computing time. In this paper we come out with a newly designed MAC algorithm which is more appropriate to be used with IP-Sec AH. Experimental results show that the expected characteristic of the MAC are satisfied by the algorithm and is faster than the existing one.