Jump to content

Message authentication

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Intgr (talk | contribs) at 14:06, 30 December 2016 (Add Cryptography navbox). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

In information security, message authentication or data origin authentication is a property that a message has not been modified while in transit (data integrity) and that the receiving party can verify the source of the message.[1] Message authentication does not necessarily include the property of non-repudiation.[2][3]

Message authentication is typically achieved by using message authentication codes (MACs), authenticated encryption (AE) or digital signatures.[2]

Some cryptographers distinguish between "message authentication without secrecy" systems -- which allow the intended receiver to verify the source of the message, but don't bother hiding the plaintext contents of the message -- from authenticated encryption systems.[4] A few cryptographers have researched subliminal channel systems that send messages that appear to use a "message authentication without secrecy" system, but in fact also transmit a secret message.

See also

References

  1. ^ Mihir Bellare. "Chapter 7: Message Authentication" (PDF). CSE 207: Modern Cryptography. {{cite book}}: |work= ignored (help)
  2. ^ a b "Chapter 9 - Hash Functions and Data Integrity" (PDF). Handbook of Applied Cryptography. p. 361. {{cite book}}: Unknown parameter |authors= ignored (help)
  3. ^ "Data Origin Authentication". Web Service Security. Microsoft Developer Network.
  4. ^ G. Longo, M. Marchi, A. Sgarro "Geometries, Codes and Cryptography". p. 188.