MULTI-S01 1508174 120127975 2007-04-04T01:56:00Z Davidgothberg 109101 Added link to new [[keystream]] article. In [[cryptography]], '''MULTI-S01''' (pronounced ''multi-ess-zero-one''), is an [[encryption]] algorithm based on a [[pseudorandom number generator]] (PRNG). MULTI-S01 is an encryption scheme preserving both [[confidentiality]] and [[data integrity]]. The scheme defines a pair of algorithms; the encryption, the corresponding decryption with [[verification]]. Coupling with an efficient [[keystream]] generator, such as [[Panama]], [[MUGI]], and [[RC4]], the algorithm efficiently encrypts a message in the manner of a single path process, i.e. [[online algorithm]]. The decryption function cannot be used in such manner for keeping whole resultant data until successful verification. The keysize of MULTI-S01 is determined by which keystream generator to use. MULTI-S01 takes a security parameter which determines the upperbound probability of successful forgery. Since the calculation consists of addition and multiplication over the [[finite field]], the algorithm is more suited to hardware implementation, although software implementation is still feasible. MULTI-S01 with the PRNG [[Panama (cipher)|Panama]] has been selected as one of [[CRYPTREC]] algorithms. It has also been submitted to [[ISO]]/[[IEC]] 18033 Part 4 which defines stream-cipher standards. The security of MULTI-S01 is based on that of underlying PRNG. If a secure PRNG is used, then the security of MULTI-S01 with respect to confidentiality and data integrity has been proven. As for the data integrity, the security proof is basically the same as one for [[Carter-Wegman MAC scheme]], which is proven to be information-theoretically secure. ==References== * Soichi Furuya, Kouichi Sakurai, ``Single-path Authenticated-encryption Scheme Based on Universal Hashing,'' in [[Selected Areas in Cryptography]], 9th Annual Workshop, SAC 2002, St. John's, Newfoundland, Canada, Aug. 2002, Revised Papers, ed. K. Nyberg and H. Heys, pp. 94–109, Lecture Notes in Computer Science vol. 2595, Springer-Verlag, 2002. * Soichi Furuya, Dai Watanabe, Yoichi Seto, Kazuo Takaragi, ``Integrity-Aware Mode of Stream Cipher,'' IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences, vol. E85-A no. 1, pp. 58–65, 2002. ==External links== * [http://www.sdl.hitachi.co.jp/crypto/s01/ MULTI-S01 home page] {{Crypto navbox | stream}} [[Category:Stream ciphers]] [[Category:Finite fields]]