IETF RFC 3566
[ACTIVE]
The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 11
- Abstract
- A Message Authentication Code (MAC) is a key-dependent one way hash function. One popular way to construct a MAC algorithm is to use a block cipher in conjunction with the Cipher-Block-Chaining (CBC) mode of operation. The classic CBC-MAC algorithm, while secure for messages of a pre-selected fixed length, has been shown to be insecure across messages of varying lengths such as the type found in typical IP datagrams. This memo specifies the use of AES in CBC mode with a set of extensions to overcome this limitation. This new algorithm is named AES-XCBC-MAC-96. [STANDARDS-TRACK]
- Publication Date
- 2003-09-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC3566- Link
- https://doi.org/10.17487/RFC3566
- Author(s)
- Sheila FrankelHoward C. Herbert
- Keyword(s)
- IPSEC, Authentication, Hash Security
Latest version of IETF RFC 3566
Document Versions — IETF RFC 3566
-
▶ IETF RFC 3566 (2003-09-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- NIST FIPS 197 [Superseded]
- Black, J. and P. Rogaway, "CBC MACs for Arbitrary-Length Messages: The Three-Key Constructions," in M. Bellare, editor, Advances in Cryptology -- CRYPTO '00, volume 1880 of Lecture Notes in Computer Science, p. 0197, August 2000, Springer-Verlag. http://www.cs.ucdavis.edu/~rogaway/papers/3k.ps EXTERNAL
- Black, J. and P. Rogaway, "A Suggestion for Handling Arbitrary-Length Messages with the CBC MAC," NIST Second Modes of Operation Workshop, August 2001. http://csrc.nist.gov/encryption/modes/proposedmodes/ xcbc-mac/xcbc-mac-spec.pdf EXTERNAL
- IETF RFC 2119 [Active*]
- IETF RFC 2402 [Superseded*]
- IETF RFC 2406 [Superseded*]
Bibliographic Reference(s)
- ISBN.9780471117094 — 7. Menezes A. van Oorshot P. Vanstone S. , Handbook of Applied Cryptography , CRC Press , 1997 . EXTERNAL
- NIST SP 800-38A [Active, Amended]
- Rogaway, Phil, email communications, October 2001. EXTERNAL
- Bellare, M., J. Kilian and P. Rogaway, "The Security of the Cipher Block Chaining Message Authentication Code," Journal of Computer and System Sciences (JCSS), Vol. 61, No. 3, December 2000, pp. 362-399. http://www.cse.ucsd.edu/users/mihir/papers/cbc .{ps,pdf} EXTERNAL
- IETF RFC 2026 [Active*]
- IETF RFC 2104 [Active, Amended*]
- IETF RFC 2401 [Superseded*]
- IETF RFC 2404 [Active*]
- IETF RFC 2411 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC3566.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 3566, The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec. Available at https://doi.org/10.17487/RFC3566
Snippet:
IETF RFC 3566, The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec. Available at https://doi.org/10.17487/RFC3566
HTML (ISO 690 compliant)
Preview:
IETF RFC 3566, The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec. Available at https://doi.org/10.17487/RFC3566
Snippet:
<span class="citation"><cite>IETF RFC 3566</cite>, The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec. Available at <a href="https://doi.org/10.17487/RFC3566" target="_blank" rel="noopener">https://doi.org/10.17487/RFC3566</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 3566, The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec
doi: 10.17487/RFC3566
url: https://doi.org/10.17487/RFC3566
doi: 10.17487/RFC3566
url: https://doi.org/10.17487/RFC3566
Snippet:
<li> <cite id="bib-rfc3566">IETF RFC 3566</cite>, The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec <span class="doi">10.17487/RFC3566</span> </li>
Referenced By
- IETF RFC 3664 [Superseded*]
- IETF RFC 3821 [Active*]
- IETF RFC 4305 [Superseded*]
- IETF RFC 4307 [Superseded*]
- IETF RFC 4434 [Active*]