信息安全.轻型加密.第8部分:认证加密

[中文适用范围]： 本文档指定了一种适用于需要轻量级加密机制的应用程序的认证加密方法。该方法处理具有以下安全目标的数据字符串：a）数据机密性，即防止未经授权的数据泄露，b）数据完整性，即可使数据接收者验证数据未被修改的保护。可选地，该方法可以提供数据来源认证，即允许数据接收者验证数据发起者身份的保护。本文档中指定的方法基于轻量级流密码，并要求受保护数据的各方共享该算法的密钥。密钥管理超出了本文档的范围。 [外文原描述]： This document specifies one method for authenticated encryption suitable for applications requiring lightweight cryptographic mechanisms. This method processes a data string with the following security objectives: a) data confidentiality, i.e. protection against unauthorized disclosure of data, b) data integrity, i.e. protection that enables the recipient of data to verify that it has not been modified. Optionally, this method can provide data origin authentication, i.e. protection that enables the recipient of data to verify the identity of the data originator. The method specified in this document is based on a lightweight stream cipher, and requires the parties of the protected data to share a secret key for this algorithm. Key management is outside the scope of this document. NOTE Key management techniques are defined in the ISO/IEC 11770 series.