Process Message in 16-Word Blocks:

5.1: Copy the four chaining variables into four corresponding variables a, b, c, and d. The Algorithm considers the combination of abcd as a 128-bit single registers. This is useful for holding intermediate as well as final results.

5.2: Divide the current 512-bit block into 16 sub blocks of 32-bit each.

5.3: Now we have 4 rounds. In each round, we process all the 16 sub-blocks.

The inputs to each round are:

All the 16 sub-blocks. Say M[0] to M[15] of 32 bits.

The variables a, b, c and d of 32 bits.

Some constants t, an array of 64 elements. Say t[1] to t[64].Since there are four rounds, we use 16 out of the 64 values of t in each round.

The process of rounds:

A process P is first performed on b, c and d. This process P is different in all the four rounds.

The variable a is added to the output of the process P.

The message sub-block M[I] is added to the output of step 2.

The constant t[k] is added to the output of step 3.

The output of step 4 is circular-left shifted by s bits. The value of s keeps changing.The variable b is added to the output of step 5.

The output of step 6 becomes the new abcd for the next round.

One MD5 Operation:

We define four auxiliary functions that is Process P in our context, that each take as input of three 32-bit words and produce as output one 32-bit word.

a b c d

Process P

ADD

ADD

ADD

SHIFT

ADD

M [I]

T [K]

a b c d

Round 1 =(b and c) or (not (b)) and d Round 2 = (b and d) or (c and (not(c))) Round 3 = b xor c xor d

Round 4 = c xor (b or not (d))

Summary:

The MD5 message-digest algorithm is simple to implement, and provides a "fingerprint" or message digest of a message of arbitrary length. It is conjectured that the difficulty of coming up with two messages having the same message digest is on the order of 2^64 operations, and that the difficulty of coming up with any message having a given message digest is on the order of 2^128 operations. The MD5 algorithm has been carefully scrutinized for weaknesses. It is, however, a relatively new algorithm and further security analysis is of course justified, as is the case with any new proposal of this sort.

Message Authentication Code (MAC)

The concept of MAC is quite similar to that of a message digest. However, there is one difference. As we have seen, a message digest is simply a fingerprint of a message. There is no cryptographic process involves in the case of message digests. In contrast, a MCA requires that the sender and the receiver should know a shared symmetric key, which is used in the preparation of the MAC. Thus, MAC involves cryptographic processing. Let us assume that the sender A wants to send a message M to receiver B. A and B share a symmetric (secret) key K. which is not known to anyone else. A calculates the MAC by applying key K to the message M.

1. A then sends the original message M and the MAC h1 to B.

2. When b receives the message B also uses K to calculate its own MAC h2 over M.

3. B now compares h1 with h2. If the two matches, B concludes that the message M has not been changed during transit However, if h1 not equals h2, B rejects the message realizing that the message was changed during transit.

The significance of a MAC is as follows:

1. The MAC assures the receiver (in this case, B) that the message is not altered. This is because if an attacker alters the message but doesn’t not alter the MAC (in this case, h1), then the receiver’s calculation of the MAC (in this case h2) will differ from it. Why does the attacker then not also alter the MAC?

Well, as we know, the key used in the calculation of the MAC (in this case K) is assumed to be known only to the sender and the receiver ( in this case, A and B). Therefore, the attacker does not know the key K, and therefore cannot alter the MAC.

2. The receiver (in this Case, B) is assured that the message indeed came from the correct sender (in this case, A). Since only the sender and the receiver (A and B, respectively, in this case) know the secret key ( in this case, K), no one else could have calculated the MAC( in this case, h1) sent by the sender ( in this case, A).

Interestingly, although the calculation of the MAC seems to be quite similar to an encryption process, it is actually different in one important respect. As we know, in symmetric key cryptography, the cryptographic process must be irreversible. That is, the encryption and the decryption are the mirror images of each other.

However, note that in the case of MAC, both the sender and the receiver are performing encryption process only.

We have already discussed two main message digest algorithms, namely MD5 and

SHA-1. Can we reuse these algorithms for calculating a MAC, in their original form? Unfortunately, we cannot reuse them, because they do not involve the usage of a secret key, which is the basis of MAC. Consequently, we must have a separate practical algorithm implementation for the MAC. The solution is HMAC, a practical algorithm to implement MAC.

SHS Padding stage or HMAC algorithm:

Introduction:

HMAC stands for Hash-based Message Authentication Code. HMAC has been chosen as a mandatory security implementation for the Internet Protocol (IP) security, and is also used in the Secure Layer(SSL) protocol, widely used on the Internet.

The fundamental idea behind HMAC is to reuse the existing message digest algorithms, such as MD5 or SHA-1. Obviously, there is no point in reinventing the wheel. Therefore, what HMAC does it to work with any message digest algorithm? That is, it treats the message digest as a black box. Additionally, it uses the shared symmetric key to encrypt the message digest, which produces the output MAC.

How does HMAC work?

Let us now take a look at the internal working of HMAC. For this, let us start with the various variables that will be used in our HMAC discussion.

MD = The message digest/hash function used (eg. MD5, SHA-1, etc)

M = The input message whose MAC is to be calculated L = The number of blocks in the message

b = The number of bits in each block

K = The shared symmetric key to be used in HMAC Ipad = A string 00110110 repeated b/8 times Opad = a string 01011010 repeated b/8 times

Armed with these inputs, we shall use a step- by-step approach to understand the HMAC operation.