0

In many papers, I see EUF-CMA and SUF-CMA referenced as a canonical term used, but I did not find a reference paper/book that give a formal definition of the those terms. I am looking for a reference that formally defines EUF-CMA, SUF-CMA security and universal forgery, similar to this answer.

cryptobeginner
  • 357
  • 1
  • 6

1 Answers1

2

The first seminal paper to define the terms Chosen Message Attack (CMA) and existential forgery (the opposite of which is SUF and WUF) is A digital signature scheme secure against adaptive chosen-message attacks by S. Goldwasser, S. Micali, and R. L. Rivest. But the best paper to formally define SUF-CMA and WUF-CMA in the form of a game is Authenticated Encryption: Relations among notions and analysis of the generic composition paradigm by Mihir Bellare and Chanathip Namprempre. See specifically Fig. 6:

enter image description here

Below the figure, you'll find a very precise definition of the concept of Unforgeability.

As far as books, I have found Dan Boneh's book A Graduate Course in Applied Cryptography to be the most elaborate when it came to game definitions. Check for example Chapter 6 Message Integrity and specifically Attack Game 6.1 (MAC Security).

hlayhel
  • 376
  • 1
  • 7