Improved security analysis of PMAC
Mridul Nandi, Avradip Mandal · Journal of Mathematical Cryptology · 2008
Abstract In this paper we provide a simple, concrete and improved security analysis of Parallelizable Message Authentication Code or PMAC. In particular, we show that the advantage of any distinguisher at distinguishing PMAC from a random function is at most (5 q σ – 3.5 q 2 )/2 n . Here, σ is the total number of message blocks in all q queries made by and PMAC is based on a random permutation over {0, 1} n . In the original paper of PMAC by Black and Rogaway in Eurocrypt-2002, the bound was shown to be (σ + 1) 2 /2 n –1 . In FSE-2007, Minematsu and Matsushima provided a bound 5ℓ q 2 /(2 n – 2ℓ), where ℓ is the number of blocks of the longest queried made by the distinguisher. Our proposed bound is sharper than these two previous bounds.