<x:xmpmeta tsc:version="2.0.1" xmlns:x="adobe:ns:meta/" xmlns:tsc="http://www.techsmith.com/xmp/tsc/">
   <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpDM="http://ns.adobe.com/xmp/1.0/DynamicMedia/" xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:tscDM="http://www.techsmith.com/xmp/tscDM/" xmlns:tscIQ="http://www.techsmith.com/xmp/tscIQ/" xmlns:tscHS="http://www.techsmith.com/xmp/tscHS/" xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#" xmlns:stFnt="http://ns.adobe.com/xap/1.0/sType/Font#" xmlns:exif="http://ns.adobe.com/exif/1.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
      <rdf:Description dc:date="2017-03-06 01:37:43 AM" dc:source="Camtasia,9.0.1,enu" dc:title="l_12mac" tscDM:firstFrame="l_12mac_First_Frame.png" tscDM:originId="2625EA67-814F-4A0C-B4C7-2902396CFF3B" tscDM:project="l_12mac.tscproj">
         <xmpDM:duration xmpDM:scale="1/1000" xmpDM:value="3895700"/>
         <xmpDM:videoFrameSize stDim:unit="pixel" stDim:h="1080" stDim:w="1440"/>
         <tsc:langName>
            <rdf:Bag>
               <rdf:li xml:lang="en-US">English</rdf:li></rdf:Bag>
         </tsc:langName>
         <xmpDM:Tracks>
            <rdf:Bag>
               <rdf:li>
                  <rdf:Description xmpDM:trackType="ScreenText" xmpDM:frameRate="f1000" xmpDM:trackName="Screen Text">
                     <xmpDM:markers>
                        <rdf:Seq>
                           <rdf:li><rdf:Description xmpDM:name="Message Authentication Codes Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-17/" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Was this message altered? Did he really send this?" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Overview Message Authentication MACs based on Hash Functions: HMAC MACs based on Block Ciphers: DAA and CMAC Authenticated Encryption: CCM" xmpDM:startTime="1100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="and GCM Pseudorandom Number Generation Using Hash Functions and MACs These slides are based partly on Lawrie Brown’s slides supplied" xmpDM:startTime="1100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="with William Stallings’s book “Cryptography and Network Security: Principles and Practice,” 7h Ed, 2017." xmpDM:startTime="1100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Message Security Requirements Disclosure Traffic analysis Masquerade Content modification Sequence modification Timing modification Source repudiation Destination repudiation Message Authentication =" xmpDM:startTime="26200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Integrity + Source Authentication" xmpDM:startTime="26200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Public-Key Authentication and Secrecy Double public key encryption provides authentication and integrity." xmpDM:startTime="167967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Double public key Þ Very compute intensive Crypto checksum (MAC) is better." xmpDM:startTime="167967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Based on a secret key and the message." xmpDM:startTime="167967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Can also encrypt with the same or different key." xmpDM:startTime="167967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Message A’s Private Key B’s Public Key A B" xmpDM:startTime="167967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="MAC Properties A MAC is a cryptographic checksum MAC = CK(M) Condenses a variable-length message M using a secret key" xmpDM:startTime="311500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="To a fixed-sized authenticator Is a many-to-one function Potentially many messages have same MAC But finding these needs to be" xmpDM:startTime="311500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="very difficult Properties: It is infeasible to find another message with same MAC MACs should be uniformly distributed MAC should" xmpDM:startTime="311500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="depend equally on all bits of the message Public key MACs provide non-repudiation." xmpDM:startTime="311500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Secret key MACs do not." xmpDM:startTime="311500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="311500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Public-Key Authentication and Secrecy Double public key encryption provides authentication and integrity." xmpDM:startTime="428600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Double public key Þ Very compute intensive Crypto checksum (MAC) is better." xmpDM:startTime="428600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Based on a secret key and the message." xmpDM:startTime="428600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Can also encrypt with the same or different key." xmpDM:startTime="428600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Message A’s Private Key B’s Public Key A B" xmpDM:startTime="428600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="MAC Properties A MAC is a cryptographic checksum MAC = CK(M) Condenses a variable-length message M using a secret key" xmpDM:startTime="489600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="To a fixed-sized authenticator Is a many-to-one function Potentially many messages have same MAC But finding these needs to be" xmpDM:startTime="489600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="very difficult Properties: It is infeasible to find another message with same MAC MACs should be uniformly distributed MAC should" xmpDM:startTime="489600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="depend equally on all bits of the message Public key MACs provide non-repudiation." xmpDM:startTime="489600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Secret key MACs do not." xmpDM:startTime="489600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="489600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Security of MACs Brute-force attacks exploiting Strong collision resistant hash have cost min(2k, 2n), k=size of key, n=size of the" xmpDM:startTime="492800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="hash MACs with known message-MAC pairs Can either attack key space (cf key search) or hash 128-bit hash looks vulnerable," xmpDM:startTime="492800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="160-bits better" xmpDM:startTime="492800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC Design Objectives Keyed Hash Þ includes a key along with message HMAC is a general design." xmpDM:startTime="590633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Can use any hash function Þ HMAC-MD5, HMAC-AES Uses hash functions without modifications Allow for easy replaceability of embedded hash" xmpDM:startTime="590633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="function Preserve original performance of hash function without significant degradation Uses and handles keys in a simple way." xmpDM:startTime="590633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Has well understood cryptographic analysis of authentication mechanism strength" xmpDM:startTime="590633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC RFC2104 Uses hash function on the message: HMACK(M) = H[(K+opad)||H[(K+ipad)|| M)] ] Where K+ = key padded to b-bits" xmpDM:startTime="627400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="or hashed to b-bits if |k|&gt;b b = block size for the hash opad, ipad are constants ipad = 36" xmpDM:startTime="627400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="repeated b/8 times opad = 5C repeated b/8 times Any hash function can be used E.g.," xmpDM:startTime="627400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="MD5, SHA-1, RIPEMD-160, Whirlpool Proved that security of HMAC relates to that of the underlying hash algorithm  " xmpDM:startTime="627400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Using Symmetric Ciphers for MACs Can use any block cipher chaining mode and use final block as a MAC Data" xmpDM:startTime="628467" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authentication Algorithm (DAA) = DES-CBC Using IV=0 and zero-pad of final block For single block message X, T=MAC(K, X) Weakness:" xmpDM:startTime="628467" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="T is also MAC of 2-block message X||(XT)" xmpDM:startTime="628467" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC RFC2104 Uses hash function on the message: HMACK(M) = H[(K+opad)||H[(K+ipad)|| M)] ] Where K+ = key padded to b-bits" xmpDM:startTime="630233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="or hashed to b-bits if |k|&gt;b b = block size for the hash opad, ipad are constants ipad = 36" xmpDM:startTime="630233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="repeated b/8 times opad = 5C repeated b/8 times Any hash function can be used E.g.," xmpDM:startTime="630233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="MD5, SHA-1, RIPEMD-160, Whirlpool Proved that security of HMAC relates to that of the underlying hash algorithm  " xmpDM:startTime="630233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC Design Objectives Keyed Hash Þ includes a key along with message HMAC is a general design." xmpDM:startTime="630633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Can use any hash function Þ HMAC-MD5, HMAC-AES Uses hash functions without modifications Allow for easy replaceability of embedded hash" xmpDM:startTime="630633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="function Preserve original performance of hash function without significant degradation Uses and handles keys in a simple way." xmpDM:startTime="630633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Has well understood cryptographic analysis of authentication mechanism strength" xmpDM:startTime="630633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC RFC2104 Uses hash function on the message: HMACK(M) = H[(K+opad)||H[(K+ipad)|| M)] ] Where K+ = key padded to b-bits" xmpDM:startTime="734333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="or hashed to b-bits if |k|&gt;b b = block size for the hash opad, ipad are constants ipad = 36" xmpDM:startTime="734333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="repeated b/8 times opad = 5C repeated b/8 times Any hash function can be used E.g.," xmpDM:startTime="734333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="MD5, SHA-1, RIPEMD-160, Whirlpool Proved that security of HMAC relates to that of the underlying hash algorithm  " xmpDM:startTime="734333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Using Symmetric Ciphers for MACs Can use any block cipher chaining mode and use final block as a MAC Data" xmpDM:startTime="1106633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authentication Algorithm (DAA) = DES-CBC Using IV=0 and zero-pad of final block For single block message X, T=MAC(K, X) Weakness:" xmpDM:startTime="1106633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="T is also MAC of 2-block message X||(XT)" xmpDM:startTime="1106633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) Black and Rogaway fixed DAA problem by using 3 keys." xmpDM:startTime="1408833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Iwata updated by generating 3 keys from a single key." xmpDM:startTime="1408833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Adopted by NIST SP800-38B Two n-bit keys from a k-bit encryption key L=E(K,0n) K1=L·x K2=L·x2 ·=Multiplication in GF(2n) Using a" xmpDM:startTime="1408833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="irreducible polynomial with min 1’s x64+x4+x3+x+1 for 64 bits x128+x7+x2+x+1 for 128 bits" xmpDM:startTime="1408833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Using Symmetric Ciphers for MACs Can use any block cipher chaining mode and use final block as a MAC Data" xmpDM:startTime="1617700" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authentication Algorithm (DAA) = DES-CBC Using IV=0 and zero-pad of final block For single block message X, T=MAC(K, X) Weakness:" xmpDM:startTime="1617700" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="T is also MAC of 2-block message X||(XT)" xmpDM:startTime="1617700" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC RFC2104 Uses hash function on the message: HMACK(M) = H[(K+opad)||H[(K+ipad)|| M)] ] Where K+ = key padded to b-bits" xmpDM:startTime="1618600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="or hashed to b-bits if |k|&gt;b b = block size for the hash opad, ipad are constants ipad = 36" xmpDM:startTime="1618600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="repeated b/8 times opad = 5C repeated b/8 times Any hash function can be used E.g.," xmpDM:startTime="1618600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="MD5, SHA-1, RIPEMD-160, Whirlpool Proved that security of HMAC relates to that of the underlying hash algorithm  " xmpDM:startTime="1618600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Using Symmetric Ciphers for MACs Can use any block cipher chaining mode and use final block as a MAC Data" xmpDM:startTime="1629900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authentication Algorithm (DAA) = DES-CBC Using IV=0 and zero-pad of final block For single block message X, T=MAC(K, X) Weakness:" xmpDM:startTime="1629900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="T is also MAC of 2-block message X||(XT)" xmpDM:startTime="1629900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) Black and Rogaway fixed DAA problem by using 3 keys." xmpDM:startTime="1630833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Iwata updated by generating 3 keys from a single key." xmpDM:startTime="1630833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Adopted by NIST SP800-38B Two n-bit keys from a k-bit encryption key L=E(K,0n) K1=L·x K2=L·x2 ·=Multiplication in GF(2n) Using a" xmpDM:startTime="1630833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="irreducible polynomial with min 1’s x64+x4+x3+x+1 for 64 bits x128+x7+x2+x+1 for 128 bits" xmpDM:startTime="1630833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="2064867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="2064867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="2064867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) Black and Rogaway fixed DAA problem by using 3 keys." xmpDM:startTime="2083033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Iwata updated by generating 3 keys from a single key." xmpDM:startTime="2083033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Adopted by NIST SP800-38B Two n-bit keys from a k-bit encryption key L=E(K,0n) K1=L·x K2=L·x2 ·=Multiplication in GF(2n) Using a" xmpDM:startTime="2083033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="irreducible polynomial with min 1’s x64+x4+x3+x+1 for 64 bits x128+x7+x2+x+1 for 128 bits" xmpDM:startTime="2083033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="2139767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="2139767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="2139767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM Counter with Cipher Block Chaining-MAC NIST SP 800-38C for WiFi Algorithmic ingredients AES encryption algorithm CTR mode of operation" xmpDM:startTime="2397000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CMAC authentication algorithm Single key for both encryption &amp; MAC Counters are generated using a counter generation function 2 passes" xmpDM:startTime="2397000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="over plaintext: MAC+E Associate data = headers in clear …" xmpDM:startTime="2397000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="2504400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="2504400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="2504400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) Black and Rogaway fixed DAA problem by using 3 keys." xmpDM:startTime="2504867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Iwata updated by generating 3 keys from a single key." xmpDM:startTime="2504867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Adopted by NIST SP800-38B Two n-bit keys from a k-bit encryption key L=E(K,0n) K1=L·x K2=L·x2 ·=Multiplication in GF(2n) Using a" xmpDM:startTime="2504867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="irreducible polynomial with min 1’s x64+x4+x3+x+1 for 64 bits x128+x7+x2+x+1 for 128 bits" xmpDM:startTime="2504867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="2523067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="2523067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="2523067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM Counter with Cipher Block Chaining-MAC NIST SP 800-38C for WiFi Algorithmic ingredients AES encryption algorithm CTR mode of operation" xmpDM:startTime="2523733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CMAC authentication algorithm Single key for both encryption &amp; MAC Counters are generated using a counter generation function 2 passes" xmpDM:startTime="2523733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="over plaintext: MAC+E Associate data = headers in clear …" xmpDM:startTime="2523733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="2553833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="2553833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="2553833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) Black and Rogaway fixed DAA problem by using 3 keys." xmpDM:startTime="2554533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Iwata updated by generating 3 keys from a single key." xmpDM:startTime="2554533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Adopted by NIST SP800-38B Two n-bit keys from a k-bit encryption key L=E(K,0n) K1=L·x K2=L·x2 ·=Multiplication in GF(2n) Using a" xmpDM:startTime="2554533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="irreducible polynomial with min 1’s x64+x4+x3+x+1 for 64 bits x128+x7+x2+x+1 for 128 bits" xmpDM:startTime="2554533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="2563800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="2563800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="2563800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM Counter with Cipher Block Chaining-MAC NIST SP 800-38C for WiFi Algorithmic ingredients AES encryption algorithm CTR mode of operation" xmpDM:startTime="2564300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CMAC authentication algorithm Single key for both encryption &amp; MAC Counters are generated using a counter generation function 2 passes" xmpDM:startTime="2564300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="over plaintext: MAC+E Associate data = headers in clear …" xmpDM:startTime="2564300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="2737267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="2737267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="2737267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="2737267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM Counter with Cipher Block Chaining-MAC NIST SP 800-38C for WiFi Algorithmic ingredients AES encryption algorithm CTR mode of operation" xmpDM:startTime="2755033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CMAC authentication algorithm Single key for both encryption &amp; MAC Counters are generated using a counter generation function 2 passes" xmpDM:startTime="2755033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="over plaintext: MAC+E Associate data = headers in clear …" xmpDM:startTime="2755033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="2760833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="2760833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="2760833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="2760833" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="2978533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3163867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3163900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3163900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3163900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3163900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3177800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3188233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3188233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3188233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3188233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3201167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3270367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3270367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3270367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3270367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3287267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3355033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3355033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3355033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3355033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3364967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3392433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3392433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3392433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3392433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3422000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs Essential elements of Pseudo-Random Number generation: Seed value Deterministic algorithm Seed must be known only" xmpDM:startTime="3425300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="as needed PRNG can be based on Encryption algorithm Hash function (ISO18031 &amp; NIST SP 800-90) MAC (NIST SP 800-90)" xmpDM:startTime="3425300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="3425300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3426933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3427367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3427367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3427367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3427367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM Counter with Cipher Block Chaining-MAC NIST SP 800-38C for WiFi Algorithmic ingredients AES encryption algorithm CTR mode of operation" xmpDM:startTime="3427567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CMAC authentication algorithm Single key for both encryption &amp; MAC Counters are generated using a counter generation function 2 passes" xmpDM:startTime="3427567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="over plaintext: MAC+E Associate data = headers in clear …" xmpDM:startTime="3427567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="3428200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="3428200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="3428200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) Black and Rogaway fixed DAA problem by using 3 keys." xmpDM:startTime="3429033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Iwata updated by generating 3 keys from a single key." xmpDM:startTime="3429033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Adopted by NIST SP800-38B Two n-bit keys from a k-bit encryption key L=E(K,0n) K1=L·x K2=L·x2 ·=Multiplication in GF(2n) Using a" xmpDM:startTime="3429033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="irreducible polynomial with min 1’s x64+x4+x3+x+1 for 64 bits x128+x7+x2+x+1 for 128 bits" xmpDM:startTime="3429033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="3442167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="3442167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="3442167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM Counter with Cipher Block Chaining-MAC NIST SP 800-38C for WiFi Algorithmic ingredients AES encryption algorithm CTR mode of operation" xmpDM:startTime="3444100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CMAC authentication algorithm Single key for both encryption &amp; MAC Counters are generated using a counter generation function 2 passes" xmpDM:startTime="3444100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="over plaintext: MAC+E Associate data = headers in clear …" xmpDM:startTime="3444100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3454600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3454600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3454600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3454600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM Counter with Cipher Block Chaining-MAC NIST SP 800-38C for WiFi Algorithmic ingredients AES encryption algorithm CTR mode of operation" xmpDM:startTime="3460900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CMAC authentication algorithm Single key for both encryption &amp; MAC Counters are generated using a counter generation function 2 passes" xmpDM:startTime="3460900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="over plaintext: MAC+E Associate data = headers in clear …" xmpDM:startTime="3460900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3473767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3473767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3473767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3473767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3481667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs Essential elements of Pseudo-Random Number generation: Seed value Deterministic algorithm Seed must be known only" xmpDM:startTime="3486133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="as needed PRNG can be based on Encryption algorithm Hash function (ISO18031 &amp; NIST SP 800-90) MAC (NIST SP 800-90)" xmpDM:startTime="3486133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="3486133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a Hash Function SP800-90 and ISO18031 Take seed V Repeatedly add 1 Hash V Use n-bits of hash" xmpDM:startTime="3486533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="as random value Secure if good hash used" xmpDM:startTime="3486533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a MAC SP800-90, IEEE 802.11i," xmpDM:startTime="3487033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="TLS Use key Input based on last hash in various ways" xmpDM:startTime="3487033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a Hash Function SP800-90 and ISO18031 Take seed V Repeatedly add 1 Hash V Use n-bits of hash" xmpDM:startTime="3489000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="as random value Secure if good hash used" xmpDM:startTime="3489000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs Essential elements of Pseudo-Random Number generation: Seed value Deterministic algorithm Seed must be known only" xmpDM:startTime="3489467" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="as needed PRNG can be based on Encryption algorithm Hash function (ISO18031 &amp; NIST SP 800-90) MAC (NIST SP 800-90)" xmpDM:startTime="3489467" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="3489467" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3490167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3531633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3531633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3531633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3531633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM Counter with Cipher Block Chaining-MAC NIST SP 800-38C for WiFi Algorithmic ingredients AES encryption algorithm CTR mode of operation" xmpDM:startTime="3532133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CMAC authentication algorithm Single key for both encryption &amp; MAC Counters are generated using a counter generation function 2 passes" xmpDM:startTime="3532133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="over plaintext: MAC+E Associate data = headers in clear …" xmpDM:startTime="3532133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="3533233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="3533233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="3533233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) Black and Rogaway fixed DAA problem by using 3 keys." xmpDM:startTime="3533567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Iwata updated by generating 3 keys from a single key." xmpDM:startTime="3533567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Adopted by NIST SP800-38B Two n-bit keys from a k-bit encryption key L=E(K,0n) K1=L·x K2=L·x2 ·=Multiplication in GF(2n) Using a" xmpDM:startTime="3533567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="irreducible polynomial with min 1’s x64+x4+x3+x+1 for 64 bits x128+x7+x2+x+1 for 128 bits" xmpDM:startTime="3533567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption Confidentiality + Integrity: Hash-then-encrypt: E(K, (M || H(M)) MAC-then-encrypt: E(K2, (M || MAC(K1, M)) Used in SSL/TLS Encrypt-then-MAC:" xmpDM:startTime="3541333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(C=E(K2, M), T=MAC(K1, C) Used in IPsec Encrypt-and-MAC: (C=E(K2, M), T=MAC(K1, M) Used in SSH But security vulnerabilities with all" xmpDM:startTime="3541333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="these NIST fixed these vulnerabilities with CCM and GCM" xmpDM:startTime="3541333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM Counter with Cipher Block Chaining-MAC NIST SP 800-38C for WiFi Algorithmic ingredients AES encryption algorithm CTR mode of operation" xmpDM:startTime="3541767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CMAC authentication algorithm Single key for both encryption &amp; MAC Counters are generated using a counter generation function 2 passes" xmpDM:startTime="3541767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="over plaintext: MAC+E Associate data = headers in clear …" xmpDM:startTime="3541767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM) NIST standard SP 800-38D, parallelizable Uses two functions: GCTR - CTR mode with incremented counter GHASH -" xmpDM:startTime="3542533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a keyed hash function GHASH: plaintext xor’ed with feedback and multiplied with hash key H in GF(2128) to generate authenticator" xmpDM:startTime="3542533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="tag H=E[K,0128] Zi’s are constructed from the encrypted text Yi and associated data MAC-only mode also Full blocks Partial Block" xmpDM:startTime="3542533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Z1 Z2 Zm Tag Tag" xmpDM:startTime="3542533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3543167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs Essential elements of Pseudo-Random Number generation: Seed value Deterministic algorithm Seed must be known only" xmpDM:startTime="3543867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="as needed PRNG can be based on Encryption algorithm Hash function (ISO18031 &amp; NIST SP 800-90) MAC (NIST SP 800-90)" xmpDM:startTime="3543867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="3543867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a Hash Function SP800-90 and ISO18031 Take seed V Repeatedly add 1 Hash V Use n-bits of hash" xmpDM:startTime="3544433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="as random value Secure if good hash used" xmpDM:startTime="3544433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs Essential elements of Pseudo-Random Number generation: Seed value Deterministic algorithm Seed must be known only" xmpDM:startTime="3545333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="as needed PRNG can be based on Encryption algorithm Hash function (ISO18031 &amp; NIST SP 800-90) MAC (NIST SP 800-90)" xmpDM:startTime="3545333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="3545333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a Hash Function SP800-90 and ISO18031 Take seed V Repeatedly add 1 Hash V Use n-bits of hash" xmpDM:startTime="3613900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="as random value Secure if good hash used" xmpDM:startTime="3613900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a MAC SP800-90, IEEE 802.11i," xmpDM:startTime="3667067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="TLS Use key Input based on last hash in various ways" xmpDM:startTime="3667067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Summary Message authentication = Integrity + Source Authentication (with or without encryption) Double public key encryption can be used but" xmpDM:startTime="3748333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="complex  Hash with a secret key HMAC is a general procedure usable with any hash function  HMAC-MD5, HMAC-AES" xmpDM:startTime="3748333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Data Authentication Algorithm (DAA) was found insecure  Fixed by CMAC using keys derived from a single key Authenticated Encryption:" xmpDM:startTime="3748333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM = CMAC + Counter mode GCM = Multiplication in GF(2128) + Counter mode Pseudorandom Number Generation (PRNG) using Hash" xmpDM:startTime="3748333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Functions and MACs" xmpDM:startTime="3748333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Homework 12 There are four general approaches in authenticated encryption: HtE, MtE, EtM, and E&amp;M." xmpDM:startTime="3872933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Which approach is used for CCM? Which approach is used for GCM?" xmpDM:startTime="3872933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Summary Message authentication = Integrity + Source Authentication (with or without encryption) Double public key encryption can be used but" xmpDM:startTime="3874967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="complex  Hash with a secret key HMAC is a general procedure usable with any hash function  HMAC-MD5, HMAC-AES" xmpDM:startTime="3874967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Data Authentication Algorithm (DAA) was found insecure  Fixed by CMAC using keys derived from a single key Authenticated Encryption:" xmpDM:startTime="3874967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM = CMAC + Counter mode GCM = Multiplication in GF(2128) + Counter mode Pseudorandom Number Generation (PRNG) using Hash" xmpDM:startTime="3874967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Functions and MACs" xmpDM:startTime="3874967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Homework 12 There are four general approaches in authenticated encryption: HtE, MtE, EtM, and E&amp;M." xmpDM:startTime="3881067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Which approach is used for CCM? Which approach is used for GCM?" xmpDM:startTime="3881067" xmpDM:duration="1000"/></rdf:li></rdf:Seq>
                     </xmpDM:markers>
                  </rdf:Description>
               </rdf:li>
               <rdf:li>
                  <rdf:Description xmpDM:trackType="TableOfContents" xmpDM:frameRate="f1000" xmpDM:trackName="Table of Contents">
                     <xmpDM:markers>
                        <rdf:Seq>
                           <rdf:li><rdf:Description xmpDM:name="Message Authentication Codes" xmpDM:startTime="0" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="0" tscDM:imageoffset="0" tscDM:imagerect="0, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Overview" xmpDM:startTime="1100" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="1" tscDM:imageoffset="0" tscDM:imagerect="75, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Message Security Requirements" xmpDM:startTime="26200" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="2" tscDM:imageoffset="0" tscDM:imagerect="150, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Public-Key Authentication and Secrecy" xmpDM:startTime="167967" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="3" tscDM:imageoffset="0" tscDM:imagerect="225, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="MAC Properties" xmpDM:startTime="311500" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="4" tscDM:imageoffset="0" tscDM:imagerect="300, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Public-Key Authentication and Secrecy" xmpDM:startTime="428600" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="5" tscDM:imageoffset="0" tscDM:imagerect="375, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="MAC Properties" xmpDM:startTime="489600" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="6" tscDM:imageoffset="0" tscDM:imagerect="450, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Security of MACs" xmpDM:startTime="492800" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="7" tscDM:imageoffset="0" tscDM:imagerect="525, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC Design Objectives" xmpDM:startTime="590633" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="8" tscDM:imageoffset="0" tscDM:imagerect="600, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC" xmpDM:startTime="627400" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="9" tscDM:imageoffset="0" tscDM:imagerect="675, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Using Symmetric Ciphers for MACs" xmpDM:startTime="628467" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="10" tscDM:imageoffset="0" tscDM:imagerect="750, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC" xmpDM:startTime="630233" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="11" tscDM:imageoffset="0" tscDM:imagerect="825, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC Design Objectives" xmpDM:startTime="630633" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="12" tscDM:imageoffset="0" tscDM:imagerect="900, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC" xmpDM:startTime="734333" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="13" tscDM:imageoffset="0" tscDM:imagerect="975, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Using Symmetric Ciphers for MACs" xmpDM:startTime="1106633" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="14" tscDM:imageoffset="0" tscDM:imagerect="1050, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Presentation Paused" xmpDM:startTime="1120333" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="15" tscDM:imageoffset="0" tscDM:imagerect="1125, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Presentation Resumed" xmpDM:startTime="1126533" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="16" tscDM:imageoffset="0" tscDM:imagerect="1200, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) " xmpDM:startTime="1408833" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="17" tscDM:imageoffset="0" tscDM:imagerect="1275, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Using Symmetric Ciphers for MACs" xmpDM:startTime="1617700" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="18" tscDM:imageoffset="0" tscDM:imagerect="1350, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="HMAC" xmpDM:startTime="1618600" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="19" tscDM:imageoffset="0" tscDM:imagerect="1425, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Using Symmetric Ciphers for MACs" xmpDM:startTime="1629900" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="20" tscDM:imageoffset="0" tscDM:imagerect="1500, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) " xmpDM:startTime="1630833" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="21" tscDM:imageoffset="0" tscDM:imagerect="1575, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="2064867" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="22" tscDM:imageoffset="0" tscDM:imagerect="1650, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) " xmpDM:startTime="2083033" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="23" tscDM:imageoffset="0" tscDM:imagerect="1725, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="2139767" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="24" tscDM:imageoffset="0" tscDM:imagerect="1800, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM" xmpDM:startTime="2397000" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="25" tscDM:imageoffset="0" tscDM:imagerect="1875, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="2504400" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="26" tscDM:imageoffset="0" tscDM:imagerect="1950, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) " xmpDM:startTime="2504867" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="27" tscDM:imageoffset="0" tscDM:imagerect="2025, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="2523067" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="28" tscDM:imageoffset="0" tscDM:imagerect="2100, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM" xmpDM:startTime="2523733" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="29" tscDM:imageoffset="0" tscDM:imagerect="2175, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="2553833" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="30" tscDM:imageoffset="0" tscDM:imagerect="2250, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) " xmpDM:startTime="2554533" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="31" tscDM:imageoffset="0" tscDM:imagerect="2325, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="2563800" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="32" tscDM:imageoffset="0" tscDM:imagerect="2400, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM" xmpDM:startTime="2564300" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="33" tscDM:imageoffset="0" tscDM:imagerect="2475, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="2737267" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="34" tscDM:imageoffset="0" tscDM:imagerect="2550, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM" xmpDM:startTime="2755033" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="35" tscDM:imageoffset="0" tscDM:imagerect="2625, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="2760833" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="36" tscDM:imageoffset="0" tscDM:imagerect="2700, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="2978533" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="37" tscDM:imageoffset="0" tscDM:imagerect="2775, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="End of presentation" xmpDM:startTime="2979767" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="38" tscDM:imageoffset="0" tscDM:imagerect="2850, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3163867" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="39" tscDM:imageoffset="0" tscDM:imagerect="2925, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3163900" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="40" tscDM:imageoffset="0" tscDM:imagerect="3000, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3177800" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="41" tscDM:imageoffset="0" tscDM:imagerect="3075, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3188233" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="42" tscDM:imageoffset="0" tscDM:imagerect="3150, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3201167" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="43" tscDM:imageoffset="0" tscDM:imagerect="3225, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3270367" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="44" tscDM:imageoffset="0" tscDM:imagerect="3300, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3287267" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="45" tscDM:imageoffset="0" tscDM:imagerect="3375, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3355033" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="46" tscDM:imageoffset="0" tscDM:imagerect="3450, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3364967" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="47" tscDM:imageoffset="0" tscDM:imagerect="3525, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3392433" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="48" tscDM:imageoffset="0" tscDM:imagerect="3600, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3422000" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="49" tscDM:imageoffset="0" tscDM:imagerect="3675, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs" xmpDM:startTime="3425300" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="50" tscDM:imageoffset="0" tscDM:imagerect="3750, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3426933" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="51" tscDM:imageoffset="0" tscDM:imagerect="3825, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3427367" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="52" tscDM:imageoffset="0" tscDM:imagerect="3900, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM" xmpDM:startTime="3427567" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="53" tscDM:imageoffset="0" tscDM:imagerect="3975, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="3428200" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="54" tscDM:imageoffset="0" tscDM:imagerect="50, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) " xmpDM:startTime="3429033" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="55" tscDM:imageoffset="0" tscDM:imagerect="125, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="3442167" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="56" tscDM:imageoffset="0" tscDM:imagerect="200, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM" xmpDM:startTime="3444100" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="57" tscDM:imageoffset="0" tscDM:imagerect="275, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3454600" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="58" tscDM:imageoffset="0" tscDM:imagerect="350, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM" xmpDM:startTime="3460900" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="59" tscDM:imageoffset="0" tscDM:imagerect="425, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3473767" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="60" tscDM:imageoffset="0" tscDM:imagerect="500, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3481667" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="61" tscDM:imageoffset="0" tscDM:imagerect="575, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs" xmpDM:startTime="3486133" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="62" tscDM:imageoffset="0" tscDM:imagerect="650, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a Hash Function" xmpDM:startTime="3486533" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="63" tscDM:imageoffset="0" tscDM:imagerect="725, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a MAC" xmpDM:startTime="3487033" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="64" tscDM:imageoffset="0" tscDM:imagerect="800, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a Hash Function" xmpDM:startTime="3489000" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="65" tscDM:imageoffset="0" tscDM:imagerect="875, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs" xmpDM:startTime="3489467" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="66" tscDM:imageoffset="0" tscDM:imagerect="950, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3490167" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="67" tscDM:imageoffset="0" tscDM:imagerect="1025, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3531633" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="68" tscDM:imageoffset="0" tscDM:imagerect="1100, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM" xmpDM:startTime="3532133" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="69" tscDM:imageoffset="0" tscDM:imagerect="1175, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="3533233" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="70" tscDM:imageoffset="0" tscDM:imagerect="1250, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cipher-based Message Authentication Code (CMAC) " xmpDM:startTime="3533567" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="71" tscDM:imageoffset="0" tscDM:imagerect="1325, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authenticated Encryption" xmpDM:startTime="3541333" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="72" tscDM:imageoffset="0" tscDM:imagerect="1400, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="CCM" xmpDM:startTime="3541767" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="73" tscDM:imageoffset="0" tscDM:imagerect="1475, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Galois/Counter Mode (GCM)" xmpDM:startTime="3542533" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="74" tscDM:imageoffset="0" tscDM:imagerect="1550, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="GCM Mode Overview" xmpDM:startTime="3543167" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="75" tscDM:imageoffset="0" tscDM:imagerect="1625, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs" xmpDM:startTime="3543867" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="76" tscDM:imageoffset="0" tscDM:imagerect="1700, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a Hash Function" xmpDM:startTime="3544433" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="77" tscDM:imageoffset="0" tscDM:imagerect="1775, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG Using Hash and MACs" xmpDM:startTime="3545333" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="78" tscDM:imageoffset="0" tscDM:imagerect="1850, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a Hash Function" xmpDM:startTime="3613900" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="79" tscDM:imageoffset="0" tscDM:imagerect="1925, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PRNG using a MAC" xmpDM:startTime="3667067" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="80" tscDM:imageoffset="0" tscDM:imagerect="2000, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Summary" xmpDM:startTime="3748333" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="81" tscDM:imageoffset="0" tscDM:imagerect="2075, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Homework 12" xmpDM:startTime="3872933" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="82" tscDM:imageoffset="0" tscDM:imagerect="2150, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Summary" xmpDM:startTime="3874967" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="83" tscDM:imageoffset="0" tscDM:imagerect="2225, 56, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Homework 12" xmpDM:startTime="3881067" tscDM:image="l_12mac_Thumbnails.png" tscDM:imageindex="84" tscDM:imageoffset="0" tscDM:imagerect="2300, 56, 75, 56"/></rdf:li></rdf:Seq>
                     </xmpDM:markers>
                  </rdf:Description>
               </rdf:li>
            </rdf:Bag>
         </xmpDM:Tracks>
         <tscDM:controller>
            <rdf:Description xmpDM:name="tscplayer">
               <tscDM:parameters>
                  <rdf:Bag>
                     <rdf:li xmpDM:name="autohide" xmpDM:value="false"/><rdf:li xmpDM:name="autoplay" xmpDM:value="true"/><rdf:li xmpDM:name="loop" xmpDM:value="false"/><rdf:li xmpDM:name="searchable" xmpDM:value="true"/><rdf:li xmpDM:name="captionsenabled" xmpDM:value="false"/><rdf:li xmpDM:name="sidebarenabled" xmpDM:value="false"/><rdf:li xmpDM:name="unicodeenabled" xmpDM:value="false"/><rdf:li xmpDM:name="backgroundcolor" xmpDM:value="000000"/><rdf:li xmpDM:name="sidebarlocation" xmpDM:value="left"/><rdf:li xmpDM:name="endaction" xmpDM:value="stop"/><rdf:li xmpDM:name="endactionparam" xmpDM:value="true"/><rdf:li xmpDM:name="locale" xmpDM:value="en-US"/></rdf:Bag>
               </tscDM:parameters>
               <tscDM:controllerText>
                  <rdf:Bag>
                  </rdf:Bag>
               </tscDM:controllerText>
            </rdf:Description>
         </tscDM:controller>
         <tscDM:contentList>
            <rdf:Description>
               <tscDM:files>
                  <rdf:Seq>
                     <rdf:li xmpDM:name="0" xmpDM:value="l_12mac.mp4"/><rdf:li xmpDM:name="1" xmpDM:value="l_12mac_First_Frame.png"/><rdf:li xmpDM:name="2" xmpDM:value="l_12mac_Thumbnails.png"/></rdf:Seq>
               </tscDM:files>
            </rdf:Description>
         </tscDM:contentList>
      </rdf:Description>
   </rdf:RDF>
</x:xmpmeta>