何时以及如何在有损信道上聚合消息认证码？
When and How to Aggregate Message Authentication Codes on Lossy Channels?
AI总结：
本研究针对有损信道下MAC聚合的丢包影响问题，实证分析了各类MAC聚合方案的有效吞吐量、验证延迟等性能，给出了39%-444%的吞吐量提升数据，并为运营商提供了方案选择指南。
摘要：
消息认证码（MACs，Message Authentication Codes）的聚合是在资源受限环境中节省宝贵带宽的一种经证实的高效方法：无需为每条消息附加长认证标签，而是将多条消息的完整性保护聚合到单个标签中。然而，尽管此类聚合可节省带宽，但单条消息丢失通常意味着多条消息的认证信息无法再被验证。随着应用向无线信道迁移，带宽受限的有损通信显著增多，因此研究丢包对过去15年间提出的各类MAC聚合方案的影响，以评估何时以及如何聚合消息认证变得至关重要。为此，我们针对有损信道场景，对所有相关MAC聚合方案开展了实证研究，考察了可实现的有效吞吐量提升、由此产生的验证延迟、处理开销以及对拒绝服务攻击的抵御能力。我们的分析表明，精心选择和配置MAC聚合十分重要：例如，根据场景不同，选择合适的方案并正确设置参数可将有效吞吐量提升39%至444%。不过，由于没有任何一种聚合方案在所有场景下都表现最优，我们为网络运营商提供了指南，帮助其选择适配特定网络环境的最优方案及参数设置。
英文摘要：
Aggregation of message authentication codes (MACs) is a proven and efficient method to preserve valuable bandwidth in resource-constrained environments: Instead of appending a long authentication tag to each message, the integrity protection of multiple messages is aggregated into a single tag. However, while such aggregation saves bandwidth, a single lost message typically means that authentication information for multiple messages cannot be verified anymore. With the significant increase of bandwidth-constrained lossy communication, as applications shift towards wireless channels, it thus becomes paramount to study the impact of packet loss on the diverse MAC aggregation schemes proposed over the past 15 years to assess when and how to aggregate message authentication. Therefore, we empirically study all relevant MAC aggregation schemes in the context of lossy channels, investigating achievable goodput improvements, the resulting verification delays, processing overhead, and resilience to denial-of-service attacks. Our analysis shows the importance of carefully choosing and configuring MAC aggregation, as selecting and correctly parameterizing the right scheme can, e.g., improve goodput by 39% to 444%, depending on the scenario. However, since no aggregation scheme performs best in all scenarios, we provide guidelines for network operators to select optimal schemes and parameterizations suiting specific network settings.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
