Lower Bounds for Multicast Message Authentication

Message integrity from one sender to one receiver is typically achieved by having the two parties share a secret key to compute a Message Authentication Code (MAC). We consider the “multicast MAC”, which is a natural generalization to multiple receivers. We prove that one cannot build a short and efficient collusion resistant multicast MAC without a new advance in digital signature design.

• Type: Conference
• Year: 2001
• Where: EUROCRYPT
• Authors: Dan Boneh, Glenn Durfee, Matthew K. Franklin
• Keywords: Cryptology, EUROCRYPT 2001, Message Authentication Code, Multicast Mac, Resistant Multicast Mac