Robust MAC aggregation with short MAC tags

摘要

Method of producing an aggregated message authentication code (MAC). The method comprises generating or receiving, in a computer processor, a first message and its first MAC tag (m₁, t₁) and computing, in the computer processor, a first hashed message-tag pair H(m₁, t₁), where H is a cryptographic hash function. The method comprises generating or receiving, in the computer processor, a second message and its second MAC tag (m₂, t₂) and computing, in the computer processor, a second hashed message-tag pair H(m₂, t₂). The method comprises computing, in the computer processor, an aggregated MAC (At₁) by an addition operation, as follows: At₁=(H(m₁, t₁)+H(m₂, t₂)) modulo N, where N is a natural number equal to two or greater.