The message authentication child generation device and the message authentication child verification device, the message authentication child generation method, being the message authentication child generation device which outputs

摘要

PROBLEM TO BE SOLVED: To apply parallel processing to processing using a time-consuming compression function.;SOLUTION: A message authentication code generation device of the present invention includes a padding unit, a message division unit, a first exclusive-OR calculation unit, an intermediate variable calculation unit, a weighted exclusive-OR calculation unit, a second exclusive-OR calculation unit, and a post-processing unit. The first exclusive-OR calculation unit calculates an exclusive-OR S_M of data m₁, ..., m_N. The intermediate variable calculation unit inputs an exclusive-OR of Δ×2ⁿ and m_n to a compression function to calculate intermediate variables v₀, ..., v_N-1. The weighted exclusive-OR calculation unit calculates a weighted exclusive-OR W of the intermediate variables v₀, ..., v_N-1. The second exclusive-OR calculation unit calculates an exclusive-OR S_V of the intermediate variables v₀, ..., v_N-1. The post-processing unit calculates a message authentication code τ from S_M, W, and S_V using the compression function.;COPYRIGHT: (C)2012,JPO&INPIT