Bug 90550 - [new port] security/p5-Digest-DMAC
Summary: [new port] security/p5-Digest-DMAC
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-ports-bugs (Nobody)
Depends on:
Reported: 2005-12-17 15:00 UTC by Gabor Kovesdan
Modified: 2005-12-17 15:21 UTC (History)
1 user (show)

See Also:

p5-Digest-DMAC.tar.gz (2.22 KB, text/plain)
2005-12-17 15:00 UTC, Gabor Kovesdan
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Gabor Kovesdan 2005-12-17 15:00:11 UTC
This is Encrypted MAC (EMAC), formerly known as Double MAC (DMAC).
Unlike HMAC, which reuses an existing one-way hash function, such as
MD5, SHA-1 or RIPEMD-160, EMAC reuses an existing block cipher to
produce a secure message authentication code (MAC).

Using the block cipher, a message is encrypted in CBC mode. The last
block is taken as the MAC of the message. For fixed-length messages,
this method is provably secure. In reality, however, messages have
arbitrary lengths, and this method is not secure. To make secure MACs
for variable length messages, the last block is encrypted once again
with a different key. The security of this construction has been proved
in the paper, ``CBC MAC for Real-Time Data Sources'' by Erez Petrank
and Charles Rackoff. The security can be proved on the assumption that
the underlying block cipher is pseudo-random.

The performance and key-agility of EMAC are reasonable. EMAC is
preferable for short messages because the block length is smaller
compared to the schemes based on a hash function. EMAC is also chosen
as one of the NESSIE winners for Message Authentication Codes, along
with UMAC, TTMAC and HMAC. The current NESSIE specification chooses the
AES as block cipher.

WWW: http://search.cpan.org/dist/Digest-DMAC
Comment 1 Erwin Lansing freebsd_committer 2005-12-17 15:21:46 UTC
State Changed
From-To: open->closed

Port added, thanks!