Section: New Results

Formal Security Proof of CMAC and Its Variants

Participants : Benjamin Grégoire, Cécile Baritel-Ruet, François Dupressoir [University of Surrey] , Pierre-Alain Fouque [Université Rennes 1] .

The CMAC standard, when initially proposed by Iwata and Kurosawa as OMAC1, was equipped with a complex game-based security proof. Following recent advances in formal verification for game-based security proofs, we have formalized a proof of unforgeability for CMAC in EasyCrypt. This work is described in [12].