Incremental Multiset Hashes and their Application to Integrity Checking

22
CSAIL Massachusetts Institute of Technology Incremental Multiset Hashes and their Application to Integrity Checking Dwaine Clarke, Srini Devadas, Blaise Gassend, Marten van Dijk, Edward Suh To appear in the Proceedings of the ASIACRYPT 2003 Conference, November 2003 Computation Structures Group Memo 464 The Stata Center, 32 Vassar Street, Cambridge, Massachusetts 02139 Computer Science and Artificial Intelligence Laboratory

Transcript of Incremental Multiset Hashes and their Application to Integrity Checking

Page 1: Incremental Multiset Hashes and their Application to Integrity Checking

CSAIL Massachusetts Institute of Technology

Incremental Multiset Hashes and their Application to Integrity Checking

Dwaine Clarke, Srini Devadas, Blaise Gassend, Marten van Dijk, Edward Suh

To appear in the Proceedings of theASIACRYPT 2003 Conference, November 2003

Computation Structures Group Memo 464

The Stata Center, 32 Vassar Street, Cambridge, Massachusetts 02139

Computer Science and Artificial Intelligence Laboratory

Page 2: Incremental Multiset Hashes and their Application to Integrity Checking
Page 3: Incremental Multiset Hashes and their Application to Integrity Checking

�������������� ������ ���� ������� ���� ��!#"������$ ��&%'���(����) �!����&�+*-,�,��&�&���. ��&%'�/ �%0� ���%'��12���� ���34�5�� 61879!��:�5;<�&��3

=�>@?BADCFEHG ID?KJ�LBENMPO�QRJ&ASC�AUTK?BV=�EWTK?BX�?BVWO�YZ?KJ�[\E]C�T^?BC_=`A a\LbM\MBOc@ID?BADV�E<d`?BV�V\E]C�X5OedHfhg�X�>.?KJ&XiQ6j�kl�mon�pRqsrBt&uvq&wxt&uzy'{|tsu�}�tN~ �^��wx��u��]�������^���

�&� ������q&ux���s� � ���Nq � qs����~�q�uzwx��������q&�z�z��� � �K�z���P�s�$~ ��w\� � � �

�4�6������ K¡N�N¢�£ �����Wwzuxt � �^����q5�^��¤��¥uzy���wxtN�&uvqs�^�����ewxtWtN�U¦]§.¨�© ªU«­¬�®¥ª��Kq&�z��{|�^�^�¥wx��ts�^����¯°�^���������owvq&� � q�u ��Kq&�z�'{­���^��wx��ts�^��¤5�^���v�'wvq&���$�owzux���^�s�5qs�5���^����w\�]~.����wx���z�¥w��Kq&�z�4{|�^�^�¥wx��ts�^��ts�B��uvq&wx��ts�'~�^��wx���z��wx��±Utsu�z��wx�v²¥�Wn�����y@~�q&�.~�^��wx���z��wx��ts{�q&uxr���wzuvq�uzy³^�^��wx���z��´��5wxt��owzux���^�N�°±U�Kq&�z�^���v²6ts{P³�µ�� � �����^�&wx����n��^��y.q&ux����^��ux��~ ���]wvq&�K��� wx�Kq&w\�N¤5�^��� ����¤¶~ ��~rB��ux�hq&ux�°q �^� � � wxt�wx�^��~.�^��wx���z��w\�swx�^���Kqs�z���\q&��rB�°��� � q&wx� �����wx��~ �5��uxts�Btsuzwx��tN�^qs�^wxt�wx�����v�Kq&�^�s�N�]n��^�5{­���^��wx��ts�^��~�q�yrB��§¨�© ªU«­¬�®¥ªD·¹¸xºN©­© «|¬v«Uºs»�¼z®¥¬v«|¬vªS½&»^ªe���@wx�^q&w��we��� � ��¾ ���^��wFwxt$³K� � w¿¤�t�~�^��wx���z��wx�6¤5�^���v�.��uxt � �^����wx�����xqs~ ���Kqs�z�b�Nt&uPÀo�^�ow5¬�®¥ªD·¿¸vºs©­© «­¬x«Dºs»4¼x®¥¬x«­¬xªS½s»�ª����wx�Kq�w5��w���� � ��¾ ������w�wxt³K� � q.�z��w°q&� � q~.�^��wx���z��w�¤5�����v�`��uxt � �^����wx�^���xq&~ ���Kq&�z���m¹�_�Kq�uzwx�����^��q&u\��¤��<���Wwzuxt � �����Á{­tN��uÂ~.����wx���z�¥w��^qs�z�¶{­���^��wx��tN�����5�\qs�v�¶¤5��wx����wx�`t\¤5��q � �Nq&�Wwvqs�N�����Ã�ÄNÅNÆWÇsÈ]É&Ê�Ç�Ë�ÌWÍ�Î �^�z���$wx�^�Ï$Ð$ÑitN�B��uvq�wx��ts��q&� � ��������uzyÂ��¾@�������Ww\ÒP�^t\¤����N��u\�P��w��^�z����q4�z���¥ux��w:����yqs� � ���5tN�^��y'�z��wzÓS��tN�������z��tN�`ux���z���owvqs�Ww\� Ã�ÄNÅNÆ]Ç&Ô�Õ�Õ]Ç&Ë]ÌWÍ�Î �^�z����q ��� ��wx��tN�`~ t � �^��t@q�Öq�ux�N�:���Wwx���N��u°q&� � �wx�]�^�������6�z�����N�Wwx��y:�����z�F��¾ �������Ww6wx�^qs� Ã�ÄNÅNÆWÇsÈ]É&Ê�Ç�Ë�ÌWÍ�Î Ò Ã�ÄNÅNÆWÇsÔ�Õ�Õ]Ç�Ë�ÌWÍ�Î qs���zt°�^�z���Fq5�z����ux�¥w�����y�r���w6��w����~.����wx���z�¥wzÓ¿��tN�������z��ts��ux���z���owvq&�Ww\� Ã�ÄNÅNÆWÇ&Ã�×�Ç&Ë]ÌWÍ�Î ���z���e³^�^��wx��³K��� � q�ux��wx��~ ��wx����qs� � ���e�^tsw�qs�e��¾ �������Wwqs�$wx���t&wx�^��u°w¹¤�t4�^qs�z�Â{­���^��wx��ts�^��ÒP�^t\¤�������u\� Ã]ÄNÅNÆ]Ç&ÃN×�Ç&Ë�ÌWÍ\Î ���$~.�^��wx���z��wzÓS��ts�������z��tN�Áux���z���owvqs�Ww\�bqs� ��^����������wx����tswx����u5w¹¤�t �^qs�z��{|�^����wx��tN�^��� � tW�����^t&w5ux�\ØW�^��ux�:q@�z����ux��w°����yW� Ã�ÄsÅNÆ]Ç&ÙWÔNÕ�Õ]Ç&Ë�Ì�Í�Î ����~ tsux���¾ �������Ww�wx�Kq&� Ã�ÄNÅsÆ]Ç&Ã�×�Ç�Ë�ÌWÍ�Î ÒP��w°���$q&���zt ~�^��wx���z��wzÓS��tN�������z��tN�`ux���z���owvqs�Ww\�Pq&� �`� tW���5�^t&w°���z��q.�z����ux��w����yW��r���wRwx�����Kq&�z�^���F��wF��uxt � ��������q&ux���z���s�^��³K��qs�Wwx��y��ts�^�N�¥uhwx�^qs�:wx�^�e�Kqs�z�����Fts{�wx�^�etswx�^�¥uF{­�^����wx��tN�����n��^�@��uxt������H�z������ux��w¹yÁt&{ Ã�ÄNÅNÆWÇsÈ]É&Ê�Ç�Ë�ÌWÍ�Î qs� � Ã�ÄNÅsÆ]ÇsÔ�Õ�ÕWÇ&Ë�ÌWÍ�Î ���:ØW�Kqs�Wwx��wvq&wx�����s� £ �ux� � �^���wx�^��Kq�u � �^���z��ts{�³K� � ���^�Ú��ts�������z��tN���`wxtÛwx���Á�Kq&u � �^���z�'ts{r�ux�\q&�]�����Ûwx���Á�^� � ��ux��y������Ú�^�z��� � tsuvq&� � tN~{­���^��wx��tN�����Kn����$��uxt&�N���'�z������ux��w¹y4t&{ Ã�ÄNÅNÆWÇ&Ã�×�Ç&Ë]ÌWÍ�Î �������4wx�^��uvqs� � tN~Üt&uvqs������~ t � ���Pqs� � ���5rKq&�z� �tN��wx�����Kq�u � �^���z��t&{6wx�^� � ���z��ux��wx����tN�Nq&ux��wx�^~Ý��uxtsr^����~`��n��^����uxt&�N�����z������ux��w¹y'ts{ Ã�ÄNÅsÆ]Ç&ÙWÔ�ÕNÕ]Ç&Ë�ÌWÍ\Î����qs���zt4���Áwx����uvqs� � tN~Ýtsuvq&�����.~ t � ���6qs� � ���$rKq&�z� � tN�Âwx�^�:�^q&u � �����z�$t&{�wx�^��¤�t&ux�owzÓ¿��qs�z�.�z��tsuzwx���ow������wxt&u���uxtNr�����~`�£ � � ��~ tN���owzuvq&wx�:�^t\¤��z��wzÓS��tN�������z��tN�Áux���z���owvqs�Ww$~�^��wx���z��w��Kq&�z�`{­�^����wx��tN���°~�q&����qs�Â�¥µ����owx���^� t&Þ ���^�~ ��~ tsuzy���Wwx���sux��w¹y.�¥�����v����ue�z������ux�°qs�Nqs���^�ow�qs��wx�����°q � ����ux�xq�ux������� £ �5��~ ��uxt�����tN� wx�����h�v�^���v����ue�z�^�v�wx�Kq�wF��w��\qs���^�z���z~�q&�����¥u6wx��~ ���owvqs~ ���R¤5��wx�^ts��wF���^�¥ux�\qs�z���^�°wx�^�e{Öux�\ØW�^������y�t&{K�v�^���v�]���Nn�������~ ��uxt���� ��¥�����v����u5�^�z����~�^��wx���z��wzÓS��tN�������z��tN�`ux���z���owvqs�Ww��Kq&�z��{­���^��wx��ts�^���ß�à]á�â�ã �&ä6�Nå ���^��ux��~ ���Wwvqs�N�¥uzy���wxtN�&uvqs�^�WyW�¥~.����wx���z��w��Kq&�z��{­���^��wx��tN�����\�z��wzÓS��ts�������z��tN�:ux���z���owvqs�����N�\~�^��wx���z��wzÓ��tN�������z��tN�Âux���z���owvqs�����N�K~ ��~ tsuzy����Wwx���sux��w¹y'�v�^���v�]�����

æ ç�è°éBêPë�ì�í�îRéPïvë�è

QR[�?BC�Xh?KJ&XÁk�?BV�kñð¹jhC�ò�[�AUóPC�VWO]V&j�ò&k<?BV�Q6ô�õ4ö&÷'ø ù'ú\QFûBüKý�?BC�X<YZ=Âü<ø þ'AUTFûBÿ�ýxO��Ú?��HV\[\J&ADC��PV�óBðF?KJ��hAU[\J&?KJ� C�AD[\EÛIUE]C��B[�k [\óiV�[\J&ADC��PV��ok�?BV�kFE]V� ÂóBð4? �� E]X IUE]C��B[�k�f���kFE�� ?KJ�E ò�óPIDIDADV&AUóPC6öxJ�E]V�ASV\[�?BCb[<ADC [�k�?K[HAU[ADV'X�A��ÛòWj�ID[.[\ó C�XZX�A���EWJ�E]Cb['ADC��hjF[ V\[\JsADC��PV�>'k�ADò&k���J�ó6X�j�ò�EÂ[�kFEHV�?���E<kh?BV�k�f�ú�C�ò�J�E���E]C�[�?BI$k�?BV�kðoj�C�ò�[�AUóPC�V]O�XFE]V�ò�J&A���E]X¶ADC ø c dñdÂû��PýxO�k�?]TBE<[�kFE<?BX�XhAU[�AUóPC�?BI���J&ó���EWJ&[�� [�k�?K[WO��PAUTBE]Ciò&kh?BC��BE]V4[\ó [�kFE "! t&wx�N¦Kq&��wx��tsux��q&ux�������owx� � q&�����Kq&rB��wx���\qs����yW� � $# ���z��wx���^�.ux���z��q&ux�v�^��u�{|uxts~&%h���������^��Ñ����z�\q&ux�v����%Fuxts{�'$ts���owx�Öqsqs�)(���*���� � ��t���������n���� ! ��wx����ux��qs� � ���

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷

Page 4: Incremental Multiset Hashes and their Application to Integrity Checking

ADC��ejF[5V\[\J&ADC��FO][�kFE�ò�ó � �ejF[�?K[�AUóPC<[\ó'j���X�?K[\E:[�k�Ek�?BV�k�E]V�ADVD��J�ó���óBJ�[�AUóPC�?BIP[\ó4[�kFE.?���óPj�C�[�óBð�ò&kh?BC��BEADCZ[�kFE�ADC��hjF['V\[\J&ADC��Ff��FóBJÁ? V��Ú?BIDI°ò&k�?BC��BEBO5ASC�ò�J�E���E]C�[�?BI°kh?BV�kFE]V�òW?BC ��E���jhADò�L6I��_j���X�?K[\E]X�O�?BC�XXFóÚCFóB['CFEWE]X¶[\ó ��EÂJ�E]òW?BIDòWjhID?K[\E]X¶ó�TBEWJ�[�kFEÂE]C�[�AUJ�EñC�EW> ADC��hj�[Wf

����� ����������������������� � � �!�Ú?KJ�E�? C�ó�TBE]I�ò�J�� ��[\ó��BJ&?��hkhADòñ[\óRóPIzO�ð¿óBJÂ>'k�ADò&kZ[�kFE�óBJ&XFEWJsADC��ÛóBð[�kFEADC��ejF[�V�ADVÚCFóB[ÛA � ��óBJ�[�?BCb[Wf"�4kFE�� �Û?�� �<jhIU[�ADV\EW[�V�óBðÂ?KJ��hAD[\J&?KJ�� C�AU[\E¶V�A#"WE_[\ó k�?BV�kFE]V�óBð �� E]XIUE]C��B[�k5f �4kFE�� ?KJ&E ADC�ò�J�E���E]C�[�?BIÂADC [�k�?K[WO�>'kFE]C CFEW> ��E��0��EWJ&V¶?KJ�E ?BX�XFE]X9[\óÝ[�kFE �<jhIU[�ADV\EW[WO[�kFEHk�?BV�k�òW?BC ��E$�Rj�ADò�L6I�� j���X�?K[\E]X�fhc.E]òW?Bj�V�E �Hj�IU[�ADV�EW[4k�?BV�k�ð¹j�Chò�[�AUóPC�V >.óBJ�L¶óPC �<j�ID[�ADV\EW[�VWOF>.EADC�[\J�ó6X�j�ò�EÂXFE C�AD[�AUóPC�V.ð¿óBJ �<j�ID[�ADV\EW[�övò�óPIDIDASV�AUóPC J�E]V�ADV�[�?BC�ò�EÁ?BC�X_V\EW[�övò�óPISIDADV�AUóPC J&E]V�ADV\[�?BC�ò�EBf

% E XFE���óPC�V�[\J&?K[\E kFó�> �Hj�IU[�ASV\EW[Ák�?BV�k ð¹j�Chò�[�AUóPC�VÂE]C�?��eIUEÛV\E]òWjFJ&EÛó &ÛADC�EÚADCb[\E��BJsAU[�� òskFE]ò�LBEWJ&Vð¹óBJ`jhCb[\J&jhV\[\E]X ��E���óBJ��Bf(')&ÛASCFE0��E��ÚóBJ��ZADC�[\E��BJ&AU[ ��ò&k�E]ò�L6ADC��¶>@?BVÂADCb[\J&óRX�jhò�E]X � ��c@IDj�� EW[Â?BIzfø [email protected]+*�û6÷Wýxf�ô4ó�>EWTBEWJ]Oh[�kFE]AUJ�A � �eIUE���E]C�[�?K[�AUóPC óBð�ó &ÛADC�E`òskFE]ò�LBEWJsV4j�V\E]V-,\ö.�hAD?BV\E]X¶kh?BV�k ð¹j�Chò�[�AUóPC�Vø ù�ù�û/.Pý10°[�kFE]V�E k�?BV&k ðoj�C�ò�[�AUóPChVñòW?BC ��E j�V�E]X [\ó XFEW[\E]ò�[�J&?BC�XFó � EWJ�J�óBJsVWO �ejF[<?KJ�E CFóB[�ò�J�� ��[\óKö�BJ&?��hkhADòW?BIDI���V\E]òWjFJ�EBf2% E ��J�ó�TBE�[�k�?K[��<jhIU[�ADV\EW[�kh?BV�kÂðoj�C�ò�[�AUóPC�V�?KJ�E�ò�J�� ��[\ó��BJ&?��hkhADòW?BIDI��`V\E]òWjFJ�EBO^?BC�XV�kFó�>(kFó�> [�kFE��¶òW?BC���EÁj�V�E]X_ADC �hIS?Bò�EÂóBð3,\ö.�hAD?BV\E]X�k�?BV�k¶ðoj�C�ò�[�AUóPChV@[\ó �hj�ASIDX ?BC�ó &ÛADCFEÁòskFE]ò�LBEWJV\E]òWjFJ&E@?��P?BASC�V\[:?Bò�[�AUTBE4?BX�TBEWJ&V�?KJ&AUE]V]f/�hjFJ�[�kFEWJ�ÚóBJ�EBOK>E�ADC�[\J�ó6X�j�ò�E@?BCÚA � �hJ�ó�TBE]X�ò&k�E]ò�LBEWJ.[�k�?K[:òW?BC��EWJ�ð¹óBJ� ��EW[\[\EWJ ��E]òW?Bj�V\E AU[ñj�V\E]V<V��Ú?BIDIDEWJÁ[�A ��EÛV�[�?�� �hVÁ>'AU[�kFóPjF[ÁADChò�J�E]?BV�ADC��¶[�k�EÚð¿J&E4��jFE]Chò �ióBðò&k�E]ò�L6VWf6G@k�E]ò�L6ADC��Á[�kFE'ADCb[\E��BJsAU[��HóBð ��E���óBJ���ADV:A � ��óBJ�[�?BCb[:ASC �hj�ADIDXhADC��'V�E]òWjFJ�E ��J&óRò�E]V�V�óBJ&V�>4k�ASò&kòW?BC_ðo?BòWADIDAD[�?K[\EÁV\óBð¿[¥>.?KJ&E<IDADò�E]ChV�ADC���?BC�X_=`A��PAU[�?BI�þ'A��Pk�[�V'YZ?BC�?��BE���E]C�[ �o=`þ'Y Áø�Q�G4d * .65�ýxf

��k�E �h?���EWJ<ADVñóBJ��P?BC�A#"WE]X ?BVñð¹óPIDIUó�>4VWf$Q6E]ò�[�AUóPC ÿ�XFE]V�ò�J&A ��E]VÁJ�E]ID?K[\E]X >.óBJ�L ?BC�X V�j�� �Û?KJ&A#"WE]VóPjFJÁò�óPC�[\J&A��hj�[�AUóPC�VWf�Y�jhIU[�ADV\EW[Âk�?BV�k ðoj�C�ò�[�ADóPC�V`?KJ�EÚXFE CFE]X ADC QRE]ò�[�ADóPC75Rf98;:=<?>!@?A�B CD@/EDF!G�H�?BC�X8D:?<?>!@?IJ=J!@/EDF;G4H_?KJ�E�XFE]V�ò�J&A ��E]XiADC QRE]ò�[�AUóPC �FO�?BC�XK8D:?<?>!@ 8=LD@ E;F;G�H_?BChXM8D:=<6>;@ N�IJ=J!@/EDF;G4H_?KJ�EXFE]V�ò�JsA���E]XHASC�Q6E]ò�[�AUóPCÚüRf'`jFJ�?����eIDADòW?K[�AUóPCHóBð��<j�ID[�ADV\EW[�k�?BV�k�ðoj�C�ò�[�AUóPChV°[\ó<ò&kFE]ò&LRADC��Â[�kFE�ADC�[\E��BJ&AU[��óBð ��E���óBJ��iADVÂXFEW[�?BADIUE]X ASC Q6E]ò�[�AUóPCPORf°QRE]ò�[�AUóPCPQ¶ò�óPC�òWIDj�XFE]V�[�kFE �e?���EWJ�f�õ ����E]C�X�ASò�E]V�õ<O5c�O°G�O?BC�XZ= ��J�ó�TBE<[�kFEHV\E]òWjFJ&AD[��¶óBð�óPjFJ@�<j�ID[�ADV\EW[4k�?BV&k_ðoj�C�ò�[�AUóPC�V]fhõB����E]ChX�A � g ��J&ó�TBE]V'[�kFE<V\E]òWj�J&AU[��óBð�óPjFJ�CFEW> �ÚE���óBJ��¶ADC�[\E��BJ&AU[�� ò&k�E]ò�LBEWJ]f

R SUT�V1W�é ThìYX ë5ê6Z[W�èì]\�í:ê_^ ë�è°éBêbï1`.í�éPïxë°èba��kFE@�Ú?BADC ò�óPCb[\JsA��hjF[�AUóPCÛóBð�óPjFJ.>óBJ�L ADV�[�k�E'ADC�[\J�ó6X�j�ò�[�AUóPCÛóBðD�<jhIU[�ADV\EW[.k�?BV�kÚðoj�C�ò�[�ADóPC�V:[\ó��BEW[�kFEWJ>4AU[�k [�k�EÁXFE C�AU[�ADóPCÛóBð �<jhIU[�ADV\EW[ ?BC�X¶V\EW['ò�óPIDIDADV�ADóPCÛJ�E]V&ADV\[�?BC�ò�EBf���k�EÁV\E]ò�óPC�X¶ò�óPC�[\J&A��hjF[�ADóPC¶ADV@[�kFEXFEWTBE]IUó�� ��E]Cb['óBð�? �BE]CFEWJ&?BI�[�kFEWóBJ��_IUE]?BXhADC���[\ó �4kFEWóBJ�E��0÷ñð¿J&ó � >4k�ASò&k¶>.E<XFEWJsAUTBEÁV\EW[�övò�óPIDIDASV�AUóPCJ�E]V�ASV\[�?BC�ò�E�ð¹óBJc8;:=<6>;@?A�B C;@ EDF!G�H�O�? �<j�ID[�ADV\EW[ kh?BV�k&�h?BV�E]XÝóPC [�kFEMde'Âþ ó���EWJs?K[�AUóPC �o?BX�XhAU[�AUóPC��ó6X�j�IUó�ÿ sO�?BC�X �<jhIU[�ADV\EW[�övò�óPIDISADV�AUóPCÛJ�E]V�ADV\[�?BChò�E'ð¹óBJf8;:=<?>!@?I=JJ!@/EDF!G�H�OP? �Hj�IU[�ASV\EW[.kh?BV�k��h?BV\E]X óPC?BX�X�AD[�AUóPC ��ó6X�j�IUó ? ID?KJ��BE_ASCb[\E��BEWJ]f ��kFE¶[�kFEWóBJ�� �BE]CFEWJs?BIDA#"WE]V�[�kFE�J�E]V�j�IU[�V�ASC ø c dÂþ'ûBüKýxO�>'kFEWJ�E?BCKde'`þ ö.�h?BV�E]XZV�òskFE���E�ADV�j�V\E]X_ð¹óBJ ��E]V�V�?��BE�?BjF[�kFE]C�[�ADòW?K[�AUóPC�fg'`jFJ'[�kFEWóBJ��_kFóPISX�V�ð¹óBJ�?BXhX�AU[�AUóPC��ó6X�j�IUó�?BC � ASCb[\E��BEWJ]f

c.óB[�kU8D:?<?>!@?A!B/CD@/EDF;G4H¶?BC�Xh8D:=<6>;@6IJJ�@ E;F;G�H¶j�V�E<? V\E]ò�J�EW[`LBE��Bf ��kFE<[�k�AUJ&XZò�óPCb[\J&A �hjF[�AUóPCiADV��kFEWóBJ&E�� ÿ [�kh?K[ ��J�ó�TBE]V �Hj�IU[�ASV\EW[�övò�óPIDIDADV&AUóPC J�E]V�ADV\[�?BChò�E_ð¿óBJi8;:=<?>!@ 8?L�@ E;F;G4H�O�? �Hj�IU[�ADV\EW[ k�?BV�kðoj�C�ò�[�AUóPC �h?BV\E]X óPC �<jhIU[�A��hIDASòW?K[�AUóPCÛADC ? C�AU[\E E]IDX90?8;:=<?>!@ 8?L�@ E;F;G4HÚXFóRE]V CFóB[@j�V\E`?HV�E]ò�J�EW[@LBE��Bf��kFE ��J&ó�óBð�j�V@�h?BV�ASò<IDASCFE<óBð[�kFóPj��Pk�[ÂADV`ð¿J&ó � ø c Yiû6Q^ý�>4k�ASò&k XFEWTBE]IUó��hV)�ÚE]V�V�?��BEÚk�?BV�khADC�� �e?BV\E]XóPC �<j�ID[�A��hIDADòW?K[�ADóPCiASC ? C�AU[\E E]ISX�fD��kFEÛð¿óPjFJ&[�k ò�óPC�[\J&A��hjF[�ADóPC�O5IUE]?BX�ADC��_[\óM8D:=<6>;@ N�IJ=J!@/EDF;G4H�OADV���kFEWóBJ�E��k5 ��J�ó�TRASC�� [�k�?K[ >.E �Ú?�� J�E��hID?Bò�E �<jhIU[�A��hIDASòW?K[�AUóPC ADC [�kFE C�AU[\E E]IDX � � TBE]ò�[\óBJ?BX�X�AD[�AUóPC ��óRXhj�IUóÂ?ÁID?KJ��BE�ASCb[\E��BEWJ]fbú�C�ø c Yiû6Q�ýxOb?ÁV&A �ÚADID?KJ$[�kFEWóBJ�E�� ADV�j�V\E]XÚð¿óBJ �ÚE]V�V�?��BE4k�?BV&k�ADC��Ff'`jFJ [�kFEWóBJ�E�� �o?BChX9[�kFE]AUJ [�kFEWóBJ�E�� ð¹óPIDIUó�>4V X�AUJ�E]ò�[�I�� ð¹J�ó �#?����hISADòW?K[�AUóPC óBð<õ:a�[�?BAlj�V [�k�EWóBJ�E��ø�dÁd`ô`û OFO�õ:a\[&û O^ýxf

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÿ

Page 5: Incremental Multiset Hashes and their Application to Integrity Checking

'`j�J C�?BI°V�A��PC�A òW?BCb[�ò�óPCb[\JsA��hjF[�AUóPCZADV�[�kh?K[�>.E�ADCb[\J&óRX�jhò�Eñ?BC�ó & ADCFE<òskFE]ò�LBEWJñ[�k�?K[�ASV4ò�J�� �Fö[\ó��BJ&?��hkhADòW?BIDI�� V\E]òWjFJ�E ?BC�X9>'k�ADò&k A � ��J�ó�TBE]V óPC [�kFE ��EWJ�ð¹óBJ�Ú?BC�ò�E óBðH[�kFE ó &ÛADCFE òskFE]ò�LBEWJ ADCø [email protected] * û6÷Wýxf

� � íbVxéBï a�TFé��PW9a����:íè�îRéPïxë�è a

��k�ASVV\E]ò�[�ADóPC X�E]V�ò�J&A���E]V7�<j�ID[�ADV\EW[@k�?BV�k ð¹j�Chò�[�AUóPC�VWf% E J&V\[@ADC�[\J�óRXhj�ò�E@�Hj�IU[�ASV\EW[�VWf?% EÂJ&EWð¿EWJ@[\óÚ?�Hj�IU[�ADV\EW[.?BV@? C�AU[\E4j�C�óBJ&XFEWJ�E]X �BJ�óPj�� óBð5E]IUE���E]C�[�V.>4kFEWJ�E`?BC E]IUE���E]C�[.òW?BC ó6òWòWjFJ ?BV@? �ÚE�� ��EWJ��óBJ�E�[�k�?BC óPChò�EBf5õ'IDI$V\EW[�VÁ?KJ&E �Hj�IU[�ASV\EW[�VWO �hjF[`? �<j�ID[�ADV\EW[`ADV`CFóB[Â? V�EW[ÁAUð:?BC E]IUE���E]C�[Á?�����E]?KJ&V��óBJ�EÛ[�k�?BC óPC�ò�EBf�5EW[� ��EÚ? �<j�ID[�ADV\EW[ÂóBð@E]IUE���E]C�[�VñóBð ?Zò�óPj�Cb[�?��eIUEÛV\EW[ � f �4kFEÛCRj�� ��EWJÁóBð[�A ��E]V������ ADV`ADCi[�kFE �Hj�IU[�ADV�EW[� ADV`XFE]CFóB[\E]X � ����'?BC�X ASV�òW?BISIUE]Xi[�kFE �<j�ID[�A��hIDADòWAD[�� óBð��<ADC-f ��k�EHV�j�� óBð�?BISI�[�kFE �Hj�IU[�A��eIDADòWAU[�AUE]V@óBð� ADV`òW?BIDIUE]XZ[�kFE�òW?KJ&X�ADC�?BISAU[��¶óBð�-f�Y�j�ID[�ADV\EW[`j�C�AUóPCò�ó �0�hADCFE]V [¥>ó��<jhIU[�ADV\EW[�V ADC�[\óÛ? �Hj�IU[�ASV\EW[ ADC¶>4k�ASò&k E]IUE���E]C�[�V4?�����E]?KJ4>4AU[�k¶? �Hj�IU[�A��eIDADòWAU[ ��[�k�?K[ADV�[�kFEÚV�j�� óBð[�kFE]AUJ)�Hj�IU[�A��hISADòWAU[�AUE]V'ADC�[�k�EÚADC�AU[�AD?BI �<jhIU[�ADV\EW[�VWf % EÚXFE]C�óB[\E �<j�ID[�ADV\EW[`j�C�AUóPC � ���?BC�XÜ?BV�V�j���E [�kh?K[H[�k�E ò�óPC�[\E � [ÚASC >'k�ADò&k�� ADV�j�V\E]X �Ú?KLBE]VÚòWIUE]?KJ�[\ó [�kFE J�E]?BXFEWJ�>4kFEW[�k�EWJ<>.E��E]?BC_V�EW[4j�C�AUóPC óBJ �<j�ID[�ADV\EW[�j�C�ADóPC�f

����� �!#"$!&%'�)(+*-,(�4 �&.0/21435/26�3 87���� :9��<;�� �7� �=;'9 �>7 �>7���� ��� �l�?;�� �A@/����B��l�/� �&B ��CD;E;�GF �/�IH?��J9 � �>B��LKNM(�� f:9 �O;��#� ��� � �<jhIU[�ADV\EW[�k�?BV&k¶ð¹jhC�ò�[�AUóPC7� �+� ��� � �&P�� �LQ

R %TSVUW$�YXZX[!&%T�]\5.^B �2;��_B���� ������ � � �`� � �D1� � � �aBi� �� �)� �e�$���4cb3� �c���d9fe/� ���/� � :@�g ÿih�jcb ���L9 �k ���b����Bi� � �D �lH�a9LK m3��BN;'9 � ��� � �/�nH �;��9 �/�D ��� �- �� cb �-���/� � 1��9 �-��/����� ��� �c� �oB �/���p7��/���'e?�qe��B �/���D � �rB �LB ��92@EK

R %TSVUs+Wis+t!:u:!#"2vw\�x;� ��� ��. ���/��7�� �y;'9 �>7 �>7���� ��� �l�$�/�IH?��9 � �>B j �rB����� � �4�� �����ze ��� �/�Abb�d@2� ������1� ��� � ��Bi�|{/�/� �D�[KrM(���a9 � ����9 �?b �c�����qe}6 3 1�����dB_;!��9 � �������� �LK-M(��� � �/� �#��b3���YH89 �����6 � �/�B��� b��/�~e)� �d9����dB_;!��9���� � �P1��7���;��������l7 � �ZQ

. �� `643�. ��

����9 �/� ��B���� �����4 �4 � �_��K!:� R W$��SV���T"[spu:!#"ovw\8�U��bb�/���~e � �#� �M1��7��U�>7��#�K1� �:� �4�l���D �A@ ����BN;��! ��. �� �V��� ?�2���db3����H

. �� �/�'e . �� � aK_M(�!�5143]�2;!�L9 �61��9�B ��� � �$ ��� c;������ ��7��#�[Q

. ����� � ]6�3�. �� �1438. �� �

����9 �/� ��B���� �����4 �5 �/�'e��� � ����K���?;!��9 �l�����#��92jy�2����b3� ��HK�/�;�G@n. �� ��/�'eK�/� ���#�LB ���D�4�}��j]b ����� �7������� �G@ ����BN;��! �4. ����0�$�[�� ]��. �� �1438. ���$�[�� aK

õ�V`AU['ADV]Oh[�k�ADV�XFE ChAU[�AUóPC�ASV'CFóB[�TBEWJ���jhV\EWð¹jhIzO���E]òW?Bj�V\E .0ò�óPj�IDX ��EH?BC ��ò�óPC�V\[�?BC�[`ð¹jhC�ò�[�AUóPC�f% E4CFEWE]XÚ[\óñ?BX�X�V\ó ��E4LRADChX<óBð�ò�óPIDIDASV�AUóPCHJ�E]V�ADV�[�?BC�ò�E [\óñk�?�TBE4?Áj�V\EWðoj�I6k�?BV�k�ðoj�C�ò�[�ADóPC�fBõ ò�óPIDISADV�AUóPCð¹óBJN���ADV ? �<j�ID[�ADV\EW[_ ������V�jhò&k¶[�k�?K[_. �� w6 3 . ���� sf

����� �!#"$!&%'����*-��B���� �����4$�������h� �����4 �l�/� � �&� �Hj�IU[�A �V\EW[�övò�óPISIDADV�AUóPCÜJ&E]V�ADV\[�?BC�[K� � � $���K����BN;���J1� �l�/���/� �G@ � �4�4� ��� ��7��#��1�|P �'e ��C�B����� �<F2���45� � �|� �/�Te ��B���� ������5 � ���k� �;� � �� �!����d9fe/� ���/� � �l� ��� �4�Y�/�'en ��9 ��� ��;��/�G@/����B�� � � � �~�2�$��� k j������j��/�Ter. �l�" ]6 3 . �� aK

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC 5

Page 6: Incremental Multiset Hashes and their Application to Integrity Checking

�-�LB �d9z�dK �où4óB[.CFEWE]XFE]X�ð¹óBJj�ChXFEWJ&V\[�?BC�XhADC���[�kFE�J�E��Ú?BASC�XFEWJ�óBð�[�k�ADV$�e?���EWJ�f ���ó �Û?KLBE4[�k�ADV�C�óB[�AUóPCð¹óBJ�Ú?BIzO]>.E�CFEWE]Xñ[\ó'ò�óPC�V&ADXFEWJ�?4ð¹?��ÚASI���� óBð��Hj�IU[�ADV�EW[5k�?BV�kÁðoj�C�ò�[�ADóPC�V"�&.��-/2143��_/2643�� �ADC�XFE � E]X� � ?ÛLBE�� �oV\EWE]X �� ���f �FóBJ4.�� ADC� Oe>EHXFE]CFóB[\E0� � k � [�kFEHIUó��P?KJ&AU[�k�� óBð�[�kFE<òW?KJ&XhADC�?BIDAU[ �óBð�[�k�E�V\EW[ ADC�[\óH>4k�ADòsk�.�� �Ú?��hV �Hj�IU[�ADV�EW[�V�óBð� OR[�k�?K[ ADV k � ADV[�kFEÂCRj�� ��EWJ.óBð5óPjF[ �hj�[ �hAD[�VóBð. � f;% EHXFE CFE�� h ?BV4[�kFEñV\EW[4óBð$LBE��6V � ���ð¿óBJ'>4k�ADòsk k ��� k f�c7��� �&. � .>.EñXFE]C�óB[\E<?��J�ó��e?��hADIDADV�[�ADò ��óPI��6CFó �ÚAD?BI�[�A �ÚE �oADC k �@ ?BI��BóBJ&AU[�k�� >'AU[�k óBJ&?BòWIUEñ?BòWò�E]V&V4[\ó �&.��-/2143���/26�3��7 sf

��k�E'ðo?��ÚADI�����V�?K[�ADV E]V)� �<j�ID[�A �V\EW[�övò�óPIDIDASV�AUóPCÚJ&E]V�ADV\[�?BC�ò�E`AUð5ð¹óBJ ?BIDI ����[@?BI��BóBJ&AU[�k��ÛV�� ��� sO�?BC4�CRj�� ��EWJ��^Oh?BC�X k ID?KJ��BEÂE]CFóPj��Pk �¹>4AU[�k¶J�E]V���E]ò�[ [\ó��� sO��

�����d� �� � �"!#� h /:�l� /z $!%� �&.��@ '&�ÜASV�? � �Hj�IU[�A �V\EW[�?BChX� ASV ? �<jhIU[�ADV\EW[ óBð �V�jhò&k_[�kh?K[N����� ?BC�X�.��0�l�" `643�� .��0��

( )*,+ k.-0/ �ù'óB[\E[�kh?K[ ��E]òW?Bj�V\E$� �&.��@ 5ADV ��óPI �RCFó �ÛAD?BIBADC k �ñO�>.E�>'ADIDIPò�óPC�V&ADXFEWJ�[�kh?K[°AU[$òW?BCñóPC�I ��óPj�[ �hjF[

��óPI��6CFó �ÚAD?BI�V&A#"WE]X|� ?BC�X?+f% E�?KJ&E�X�ASV�?BIDIUó�>4ADC��Âò�ó � �h?Bò�[@J�E��hJ�E]V\E]C�[�?K[�AUóPC�Vð¿óBJ �<jhIU[�ADV\EW[�V�[�k�?K[>.óPj�IDX ?BIDIUó�>1� ��� �[\óHE � ��J�E]V&VID?KJ�BEWJ �Hj�IU[�ASV\EW[�V)�oV�j�ò&k ò�ó � �e?Bò�[.J&E���J�E]V\E]C�[�?K[�AUóPC�V XFó�CFóB[@IUE]?BX [\ó?�ð¹E]?BV�A��hIDE`?K[\[�?Bò&L�ADC óPjFJ4ó &ÛADCFE)��E���óBJ� ASCb[\E��BJ&AD[�� ?����hIDADòW?K[�ADóPC sf2 3 ì�ì�ïxéPï54(T�� íbVxéBï a�TFé}�PW9a��

ú�CÂ[�k�ADV5V�E]ò�[�AUóPCÁ>.E �PAUTBE.?BCÁE � ?�� �hIUE�óBðF?'ò�óPC�V\[\J&j�ò�[�ADóPCÁóBð � �<jhIU[�A �V\EW[�övò�óPIDISADV�AUóPC`J�E]V&ADV\[�?BC�[D�<jhIU[�ADV\EW[k�?BV�k ðoj�C�ò�[�AUóPChVWf���EW[����)��.�/]÷i� h J�E���J�E]V\E]C�[@[�kFE`V\EW[@óBðD�hAU[TBE]ò�[\óBJ&V óBð�IDE]C��B[�k k ?BC�X IUEW[y ��E?��<j�ID[�ADV\EW[�óBð:E]IDE���E]Cb[�V�óBð]� f�þ�E]òW?BIDI°[�k�?K[�[�kFE<CRj��0��EWJ'óBð:[�A ��E]V��-��� ADV'ASC_[�kFE �<j�ID[�ADV\EW[4ADV�XFE]CFóB[\E]X � ��V�'?BC�XZASV'òW?BIDIDE]X�[�kFE �Hj�IU[�A��hISADòWAU[�� óBð��ÁASC0-fT��EW[768�9&T��.�/]÷i�Zh * �;:=<>< ?@ ��EJ&?BC�X�ó �ÚI�� V�E]IUE]ò�[\E]X_ð¹J�ó � ? �hV�E]j�XFóBJ&?BC�X�ó � ð¹?��ÚASI��ÛóBð�k�?BV�k¶ðoj�C�ò�[�ADóPC�VÁø�dÁdÂYBA OKýxfp��EW[C�gED ? g ÿ h /FCEGHD ? /FCEGÝÿ h /?BC�X_X�E CFE

.��0�� `�JI>68� � .�/K� �1ML��NPO V�Q68� ��÷�/z�� ��ó6XD 0�L

��N�O �� ��ó6XC[0R�TSRUUUUU VKW O />4kFEWJ&E��=�0��ASV�?ÚJ&?BChXFó � CFóPChò�EYXKfhù4óB[�ASò�E<[�k�?K['[�kFEñIUó��P?KJsAU[�k�� óBð�[�kFEHòW?KJ&X�ADCh?BIDAU[�� k �(óBð�[�kFEV\EW[4ASCb[\ó�>4khADò&k?.�� �Û?��hV �Hj�IU[�ADV\EW[�V@óBðw� ADV E4�Rj�?BI�[\ó

k ��� IUó�� �ZD ? 1 IUó�� �[C 1ÜIUó�� �zÿ h ]g 5 k �% EÚV�?:�Z[¥>ó�[\J&A��hIUE]V�ø \ /F�i/K�^ý�?BC�X ø \ � /F� � /K� � ý:?KJ�E�E4�Rj�AUTK?BIUE]C�[WO:ø \90F��0K�^ý]643�� ø \ � 0F� � 0K� � ýxO�AUð.?BC�X

óPC�I���AUð]\�^68�0� .�/K�4 ]�_\ �P^68�0� .�/K��� $�ÚóRX�jhIUó�DZ?BChX8�_�1�o����ó6X�j�IDó`C�fRù4óB[�ADò�E�[�k�?K[@ò&kFE]ò&LRASC��>4kFEW[�k�EWJ�. � �� `6 3 � . � ���� @ADV@E��ÛòWADE]Cb[Wf;% EHXFE CFEÁ?BXhX�AU[�AUóPC óBð$[v>.óÛ[\J&A �hIUE]VÁø \90F��0K�^ý�1 3 �ø \ � 0F� � 0K� � ýD� � [�kFEÁJ�E]V�jhIU[@óBð°[�kFE<ò�ó � �hjF[�?K[�AUóPC

ø 6�� � .�/K� � � 1H\�^a68� � .�/K� c1H\ � ^a68�0� .�/K� � ��ó6X�D 0 �]1b� � ��óRXCY0R� � � ý�c VQd d�W Oe�G@IUE]?KJsI��BO .�� �� �� � ]6�3�� .��0�� c143���.�� �� � sOekFE]C�ò�EBO �&.��r/21�3���/2643�� @ADV4? �<jhIU[�ADV\EW[k�?BV�k5f���kFE)��J�óRóBð�óBð�[�kFEÁC�E � [�[�k�EWóBJ�E�� ADV ASC¶õB����E]C�XhA � õ<ff n��^�'��uxtNr^qsr�������w¹yÚ���.wvq&�����Út�����u�qÂuvqs� � ts~ �z��������wx��ts� ts{hg ���8ikj(± � ���^t&wx� � rWylgnm"ihj�²q&� � t�����u.wx���uvqs� � tN~ �����z���^�z� � ����wx�^�$�^��w�q&���Ntsux��wx��~Mo�±qp � ²�± � ���^t&wx� � rWyÁ±srutwvZ²0mxo�±qp � ²z²¥�y ! t&wx�N��wx�����z��w5{|uxts~ ¤5�^���¥�{z.����wvqs��������ts�^� � rB���z~�q&������u5wx�^qs��| �

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC �

Page 7: Incremental Multiset Hashes and their Application to Integrity Checking

��� �Y%pWi�YS (+*-� 3��� ����BN;��!1� �l�/���/� �G@c� �4�4� ��� ��7��#� 1�_P �'ei� B���� �����4� b3� �?B���� �<;�� � �4� �1� � + D�/�'e_�8B���� �����4���e���;� � �� ���M����9 e/� ���/� � �1� �M� �n � �'e��� �d9 ��;��/�G@/����B�� � �f��� ���qe7��� k j ��� � j �/�Te .�� �� ]6�3�� .��0�� � aK

õ�VÂ?BCiE � ?�� �eIUE<>.E�ò�óPC�V�ADX�EWJ7D��+ÿ ?BChX��]� k f ��k�E]C�[�kFE�ò�óPC�XhAU[�AUóPCZ[�k�?K[Â?��Hj�IU[�ASV\EW[�k�?BV8�Hj�IU[�A��eIDADòWAU[�AUE]V + ÿHV�A � �eI�� ��E]?BC�V@[�k�?K[_ ADV@?�V\EW[Wf���khADV@IUE]?BX�V@[\óÚV\EW[�övò�óPIDISADV�AUóPC J�E]V�ASV\[�?BC�ò�EBf��jFJ&[�kFEWJ��óBJ�EÁC�óB[�ADò�EÁ[�k�?K[4?BXhX�AU[�AUóPC ��ó6X�j�IDó�ÿ�X�E CFE]V � óBJ��Hf� %'W$%Tu&u&s+W$v�(+*}C�� ���������������������[F?M(���-B���� �����4 ��/���K���d929 � ��;��/�'e/� ��HK1�

.�� �� ]� I 68�0� .�/K�4 �! ��NPO ��Q68�0��÷�/z�� $0 L

��NPO �� ��ó6X_ÿ h 07� S'UUUUU VFW O /b ���L9 �`68�,&T��.�/]÷i�#"�� :=< < h X ���-9 �/�'e?��B��A@ �4� � � �� �qe+�o9 ��B �-;D�4� �+e6��9 �/�'e6�dB]����B����G@h� � ������� ����4 �l�/�!�zj � � ���4:J ���/� � �����l�/��9 � ����� 1� �DlK

ù'óB[�ADò�E`[�k�?K[�. � �� :LBEWE��hV.[\J&?Bò&LÛóBð5[�kFEÂòW?KJ&XhADC�?BIDAU[ ��óBð�+fRú�ð�[�k�ADV>EWJ�E`CFóB[.[�kFE`òW?BV\E`[�kFE]C.�� �l�" <?BC�X�.�� �� ñ?KJ&E E4�Rj�AUTK?BIUE]C�[ñð¹óBJ�?BC4��� ?BChX� >4AU[�k������ ��0�ÚóRX�jhIUó D�� ÿZð¹óBJ�4�}� f���k�ADV.>.óPj�IDX¶ò�óPC�[\J&?BX�ADò�['V\EW[�övò�óPIDIDADV&AUóPC J�E]V�ADV�[�?BC�ò�EBf�õ'ISV\óÚCFóB[�ADò�EÁ[�kh?K[���! � ASV@J&?BC�XFó �ÚI �ò&k�óPV\E]C�fKú¥ð0�4>@?BV�? �� E]XHLRC�ó�>4C�ò�óPC�V\[�?BC�[WOB[�kFE]CHL6CFó�>4IDE]X��BEóBð0D [�j��eIUE]V.øI%$(0 .��0��%$� vý6J&EWTBE]?BIDVD TBE]ò�[\óBJ&V

��N�O $� 6 � ��÷�/z�� ��<w< h X �ú�ðRD�� ÿ k [�kFE]C >4AU[�k k�A��Pk ��J�ó��h?��hASIDAU[�� [�kFE]V�E�D TBE]ò�[\óBJ&V�V �h?BC [�kFEÛTBE]ò�[\óBJ V �h?Bò�E <w< h X f ��k�ADV��E]?BC�VÛ[�k�?K[ÚE]?BòskÝTBE]ò�[\óBJ ADCM<w< h X òW?BC&��E_ò�óPC�V\[\J&jhò�[\E]XÝ?BVÛ? IDADCFE]?KJÚò�ó �0�hADC�?K[�ADóPC óBð'[�k�E]V\E DTBE]ò�[\óBJ&V�ø c YZû6QKý & @ $'& �)( $+*-, ��NPO $� 6 � ��÷�/z�� /.��

��NPO , @ $'& ��( $ $� . 6 � ��÷�/z�� �ô'E]C�ò�EBOh? ��óPI��6CFó �ÚAD?BI�V�A "WE]X_ò�óPIDIDADV&AUóPC òW?BC ��EÁò�óPC�V\[\J&j�ò�[\E]X�ð¿óBJ'?BC4� ��óPI��6CFó �ÚAD?BI�V�A#"WE]X�-f

ú�C9õB����E]C�XhA � c >.E V�kFó�> [�kh?K[¶ð¿óBJ�D E � ��óPCFE]C�[�AD?BIDI � ID?KJ��BE ADC k O.>.E �Ú?�� J�E���ó�TBE [�kFEòW?KJ&X�ASC�?BIDAU[ �10 ��N�O V�Áð¿J�ó ��[�kFEÛV�òskFE���E ?BID[\ó��BEW[�kFEWJ]f°c7� [�?KL6ADC��2�y� ÷Ú?BC�X C)� D ��ÿih->.Eó���[�?BADC_[�kFEÁCFE � [4ò�óBJ�óPIDID?KJ�Bf� %'W$%Tu&u&s+W$v ��*}C�� ������3 4546���������[F?M(���-B���� �����4 ��/���K���d929 � ��;��/�'e/� ��HK1�

.�� �� `� Iw6��0� .�/K�4 �1 L��N�O ��K68� ��÷�/z� ��ó6X�ÿ h 09�TS UUUUU VFW O /

b ���L9 �;6 � &p��.�/]÷i��"0�,: < < X j ���r9 � �'e6��B��G@c�4� � � �� �qe �o9 �dB ��;D�4� �+e6��9 �/�'e6�dB � �dB�� �G@ � � ������� ����4 �l�/�!�zj � �5B���� �����4f���/� � �����l�/�89 � ����� 1�/��lK

��k�E �Ú?BADCZX�A���EWJ�E]C�ò�E ��EW[v>.EWE]CZ[�kFE 8D:?<?>;@6A!B/CD@ E;F;G4H ?BC�X 8D:?<?>;@6IJ=J!@ E;F;G4H ADV �hASC�?KJ�� ?BX�X�A­ö[�AUóPC >4AU[�kFóPj�[ñ?BC�X >4AU[�k òW?KJ&J�� J�E]V ��E]ò�[�AUTBE]I��Bf ��k�ASVÁIUE]?BX�V<[\óZE]AD[�kFEWJHV�EW[Hò�óPIDISADV�AUóPC J&E]V�ADV\[�?BC�ò�E óBJ�Hj�IU[�ADV\EW[�ò�óPISIDADV�AUóPC J�E]V&ADV\[�?BC�ò�EBf

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ü

Page 8: Incremental Multiset Hashes and their Application to Integrity Checking

ú�C õ ����E]C�X�A � cÝ>E`V�kFó�> [�kh?K[.AU[@ADV ��óPV&V�A��hIUE4[\ó<J�E��eID?Bò�E'[�k�E'J&?BChXFó �-CFóPChò�E{�0� �Ú?Hò�óPj�C�[\EWJ[�k�?K[ �BEW[�VHADC�ò�J&E���E]Cb[\E]X óPC E]?Bò&k j�V\E�óBð�.��ñfD��khADV`J�E���ó�TBE]Vñ[�kFE CFEWE]X ð¹óBJñ?¶J&?BC�X�ó ��C�j�� ��EWJ�BE]CFEWJ&?K[\óBJ ð¹J�ó � [�k�E�V�ò&k�E���EBf@Y�óBJ�EWó�TBEWJ]O.V&kFóBJ�[\EWJÛTK?BIDjFE]V òW?BC ��E�jhV\E]X ð¹óBJ�� ?BV IUóPC�� ?BV [�kFELBE�� ADVÂòsk�?BC��BE]X >4kFE]C.�¶ó�TBEWJ���ó�>4V40�[�k�ADVÁJ�E]X�j�ò�E]VÂ[�k�EÛV�A#"WE�óBð@[�kFEÛkh?BV�k�f5õ�IDV\ó�AUð.[�kFEÚ>.E]A��Pk�[\E]XV�j�� óBð�[�kFE¶k�?BV�kFE]V 6 � ��÷�/z�� �ADC�. � �� HADV�CFEWTBEWJ�J�EWTBE]?BIUE]X [\ó [�kFE¶?BXFTBEWJ&V�?KJ�� [�kFE]CÜ>.E_òW?BCJ�E���ó�TBE76��0� .�/K�4 :ð¿J�ó �-[�kFE4V�òskFE���E`?BIU[\ó��BEW[�kFEWJ]f�FóBJ@E � ?�� �hIUEBObADCÚ[�kFE'òW?BV\E�>4kFEWJ&E�[�kFE4>.E]A��Pk�[\E]XV�j��ÛV4?KJ�E<E]C�ò�J�� ��[\E]X�� �_j�V�ADC��Ú? �hV\E]jhXFóBJ&?BC�XFó � ð¹?��ÚASI�� óBð$��EWJ�HjF[�?K[�AUóPChV0�oV\EWEÚG.óBJ�óPIDIS?KJ�� � ADCõ ����E]C�X�A � c sf

� � íbVxéBï�� V¥ïvî�W�éPï54(T � í VzéPï a�TFé}�_W9ai�

õ �<j�ID[�ADV\EW[�övò�óPIDIDASV�AUóPCÚJ&E]V�ADV\[�?BC�[ �<jhIU[�A��hIDASòW?K[�AUTBE@�Hj�IU[�ASV\EW[.kh?BV�k¶òW?BC ��EÂXFE CFE]X ?BV ð¹óPIDIUó�>4VWf �5EW[����EH? ID?KJ�BE0��JsA ��E ��ó�>EWJÂ?BC�X ò�óPC�V�ASXFEWJ'[�k�E�ò�ó � �hjF[�?K[�AUóPC�V`ADCZ[�kFE E]IDX�� ��� sf���EW[76 &+�n:� ��� $��E�? ��óPI �böxJ&?BChXFó � ð¹jhC�ò�[�AUóPC_ø�dÁdÂYBA OPýxOP[�k�?K[�ADV]OPCFó ��óPI��6CFó �ÚAD?BIR[�A ��E �oASC�[�kFE4IUó��P?KJsAU[�k��óBð��� �?BI��BóBJ&AU[�k�� >'AU[�k�óBJ&?BòWIUE4?BòWò�E]V&V�6 òW?BCÛX�ADV�[�ADC��Pj�ADV&k ��EW[v>.EWE]CÚTK?BIDjFE]V�óBð 6 ?BC�X�[\J&jFE Js?BC�XFó �V\[\J&ASC��PVWO�EWTBE]C >4kFE]C [�kFE�?BI��BóBJsAU[�k�� ADV ��EWJ�ÚAU[\[\E]XZ[\ó_V\E]IUE]ò�[Â[�k�EÚ?KJ��Pj���E]C�[�V`[\ó 6 �oADC �hJ&?Bò�[�ADò�EóPCFEÁ>.óPj�IDX¶jhV\EñY�=Âü_ø þ'AUTFûBÿ^ý5óBJ`Q6ô�õH÷Úø ù4ú�QFûBü^ý sf;% EHXFE CFE

. �� `�� ��NPO 6 ���� ����L/ ��÷:

6439[\ó ��EÂE4�Rj�?BI�[\ó|�HO�?BChX01439[\ó ��E)�<jhIU[�A��hIDASòW?K[�AUóPC ADC�� ��� sfG@IDE]?KJ&I��BO8�&.0/2143�/2643B <ADV�? �<j�ID[�ADV\EW[�k�?BV�k�f�õ'CÜ?BXFTK?BC�[�?��BE¶óBð�[�kFE¶V�ò&k�E���E¶ADVñ[�kh?K[H>.E¶XFó

CFóB[@CFEWE]X ?<V�E]ò�J�EW[@LBE��Bf��'CFð¹óBJ�[�j�Ch?K[\E]I��ÚAU[.J�E]IDAUE]V�óPC C�AU[\E E]IDX ?KJsAU[�k���EW[�ADòKO�>4k�ADòsk �Û?KLBE]V AU[�[\óRóò�óPV\[�I�� ð¹óBJ4V\ó ��E<?����hIDADòW?K[�ADóPC�VWf

��k�E �hJ�ó�óBðñóBðñ[�kFE ð¹óPIDIUó�>4ADC�� [�kFEWóBJ�E�� ADV��PAUTBE]C ASC õ ����E]C�X�A � G`O.>'kFEWJ�E >E ?BISV\ó XFE CFE[�kFEÚX�ASV�ò�J�EW[\EÚIUó�� �o=�� `?BV�V�j�� ��[�AUóPC >4k�ASò&k V�?:�RVÂ[�kh?K[Áð¿óBJñJ&?BC�XFó �������� ��� `?BC�X �BE]CFEWJs?K[\óBJ� ��� ��� sO�AU[HASV<ò�ó � �ejF[�?K[�AUóPC�?BIDI � ASCFð¿E]?BV&A��hIUEÚ[\ó ChX�� V�j�òsk [�kh?K[ ��� � � �!�ÝADVHòW?BIDIUE]X [�kFEX�ADV&ò�J�EW[\EÁIUó��ÚóBð"�� sf��� �Y%pWi�YS ��*}C�� �6� � �$#+������� �[F&% �'e?�L9 ���('�, ��������BN;� �l�/� jB�&.0/21�34/26�3 �/� e?�:Pb���qe � ��C*)oF����B����� � �4��f���/� � � � � �/��9 � � � � 1�/�DlK��C�XFEWJ$ò�EWJ�[�?BADCH?BV�V�j�� �h[�AUóPC�V�>.E7�Û?��ÂJ�E��hIS?Bò�E �Hj�IU[�A��hISADòW?K[�AUóPCÂADC+� ��� � �Â?BX�X�AU[�ADóPC ��ó6X�j�IUó

?4IS?KJ��BE�CRj�� ��EWJ]f�g:TBE]CÁ[�k�óPj��PkÁ[�kFE.C�j�� ��EWJ5óBðFóPjF[ �ejF[ �hAU[�V5óBðF[�kFE:J�E]V�jhIU[�ADC�� �Hj�IU[�ADV�EW[�k�?BV�kÁC�EWE]X�V[\ó ��E �Hj�ò&k ID?KJ��BEWJ �oV�ASC�ò�E4AU[:ADV"�h?BV\E]X�óPC-,�>E]?KLBEWJ4jR?BV�V�j�� ��[�AUóPC�V� sOB[�k�E�ó�TBEWJ&?BISI�V\óPIDjF[�ADóPC ��E]ò�ó ��E]V��óBJ�E�E��ÛòWAUE]C�[ V�ADChò�E�CFó ChAU[\E E]IDX ?KJsAU[�k���EW[�ADò¶ASVÚCFEWE]XFE]X�f��5EW[�6 &�� : <w<{?@ O D�� ÿ/. h O����0 k O���EÁ? ��óPI���öxJ&?BC�XFó � ðoj�C�ò�[�AUóPC5f�ù4ó�>ÁO�>.EñXFE CFE

. �� `�xL��NPO V�K6 ���� ��ó6XDw/ �zÿ

643 [\ó ��E:E4��jh?BIb[\ó5�HO�?BC�X�143 [\ó ��ETBE]ò�[\óBJ�?BX�X�AU[�AUóPC ��óRXhj�IUóRD�fKQ6EWEõ ����E]C�X�A � = ð¿óBJ$[�kFE ��J�óRóBðóBð�[�kFEÁCFE � [�[�kFEWóBJ�E�� ?BC�X¶[�kFEñX�E C�AU[�AUóPC óBð$[�kFEÁ>.óBJ&V\[�övòW?BV\EHV�kFóBJ�[\E]V�[�TBE]ò�[\óBJ �xQ21) ��J&ó��hIUE��¶f��� �Y%pWi�YS43 *}C�� �6� ��5 3 4�46� � ��� �[F76_@K����� ��B�� ��HK �� ) ���=x98 ;'9 ��7 � �aB �������4�4� �/���l7 � �i1� � �/�G{/�� � ;!�/�A@/���dB��l�/� �#Bi�aj7�&.0/21 3 /26 3 $���-e=�:P ���zec����C;:ZF � ��B���� �����4����/� � �����l�/��9 � ����� 1� �DlK

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC O

Page 9: Incremental Multiset Hashes and their Application to Integrity Checking

�-�LB �d9z�dKFc.E]òW?Bj�V\E;6 òW?BC ��E�EWTK?BIDj�?K[\E]X >4AU[�k�óBJ&?BòWIDE'?BòWò�E]V�V.[\ór.iO �4kFEWóBJ�E��ÚV.ÿÁ?BC�X 5ÁV\[�ADISIFkFóPIDXð¹óBJ:?�V�[\J�óPC��BEWJ�ð¹óBJ� óBð �Hj�IU[�ADV\EW[�övò�óPISIDADV�AUóPCñJ�E]V�ADV�[�?BC�ò�EBOBADCH>4k�ADòsk<AU[�ADV�ò�ó � �ejF[�?K[�AUóPC�?BIDI �ÁADCFð¹E]?BV�A��hIUEð¹óBJÁ?BC ?BXFTBEWJ&V�?KJ��Z>4AU[�kióBJ&?BòWIUEÚ?BòWò�E]V&VÂ[\ó 6 �oADChV\[\E]?BX óBð`.� 4[\ó C�X ? ò�óPIDIDADV�ADóPC�f ��khADV`ADV�>4k�?K[?BIDIUó�>4V [\óÛjhV\EÁ? �hj��eIDADòWI��Ú?�T^?BADIS?��hIUE�6 f

� ç�è°é T��5êbïxé�� ^|� Teî6Z�ïvè�� ë��$SUW�èì:ë� 3 îFî�TDa/a}� T� ë5ê��

% E`CFó�> V�kFó�>9kFó�>ÝóPjFJ7�<j�ID[�ADV\EW[�k�?BV&kÚðoj�C�ò�[�AUóPC�V�òW?BC ��E4j�V�E]XÚ[\ó �ej�ADIDX�V\E]òWjFJ&E4ó &ÛADC�E4ADC�[\E��BJ&AU[��ò&k�E]ò�LBEWJ&V�ð¿óBJ �ÚE���óBJ��Bf�QRE]ò�[�AUóPC ORfD÷�E � �hIS?BADC�V$[�kFE8��ó6XFE]IzOB?BC�XÛQRE]ò�[�AUóPC ORf�ÿÁV�kFó�>'V�kFó�> óPj�J�ó &ÛADCFEò&k�E]ò�LBEWJ`A � ��J�ó�TBE]V�[�kFEÂó & ADCFEÁò&k�E]ò�LBEWJ`ADC ø [email protected] * û6÷�ýxf

� *�( )%����u

load

FSM checker untrusted RAM

write

readtrustedstate

store

A����R¢��K¢ l�t � ���

��A��PjFJ&E ÷ ADISIDj�V\[\J&?K[\E]V<[�kFE ��ó6XFE]I.>E_jhV\EBf$��kFEWJ�E ADV�? ò&kFE]ò&LBEWJÛ[�k�?K[�LBEWE��hVÛ?BC�X �Ú?BADC�[�?BADC�VV\ó ��E�V��Ú?BISIzO �� E]X6övV�A#"WE]X5Oh[\J&j�V�[\E]XZV\[�?K[\EBf ��k�E<j�C�[\J&j�V\[\E]Xiþ4õ`Y � �Ú?BASC ��E���óBJ�� 4ADV�?KJ��hAU[\J&?KJsADI��ID?KJ��BEBf ��kFE C�AD[\E'V\[�?K[\E)�Ú?Bòsk�ADCFE � �:QFY �BE]CFEWJs?K[\E]V IUóP?BX�V.?BC�X V\[\óBJ�E]V@?BC�X [�kFE`ò&kFE]ò&LBEWJ4j���X�?K[\E]VAU[�V'[\J&j�V\[\E]X V\[�?K[\E�óPCiE]?Bò&k��:QFY2IUóP?BXZóBJ`V�[\óBJ�E�[\ó [�k�EHj�C�[\J&j�V�[\E]XZþ'õ�Y f �4kFEHòskFE]ò�LBEWJ<j�V\E]V`AU[�V[\J&j�V�[\E]X V\[�?K[\E�[\ó¶TBEWJ&AUð �_[�kFE�ADC�[\E��BJ&AU[ ��óBð.[�kFE�j�Cb[\Jsj�V\[\E]X þ4õ`Y f �4kFE<[\Jsj�V\[\E]X ò�ó � �hj�[�ADC����h?BV\E� �'G@c �ò�óPC�V�ADV�[�V�óBð5[�k�Ee�:QFY OR?BC�X [�kFE`ò&kFE]ò&LBEWJ�>4AU[�k AU[�V[\J&j�V\[\E]X V\[�?K[\EBf!�FóBJ E � ?�� �hIUEBO�[�kFE)�:QFYò�óPj�IDX ��E?@��J&óRò�E]V�V�óBJ]f���kFEòskFE]ò�LBEWJ>óPjhIDX ��E@V ��E]òWAD?BIRk�?KJ&XF>@?KJ�E.[�k�?K[�ADV�?BX�XFE]X<[\óÂ[�kFE �hJ�óRò�E]V&V\óBJ[\óÛXFEW[\E]ò�['[�?�� ��EWJ&ADC���ADC [�k�EÁE � [\EWJsC�?BI ��E���óBJ�Bf

��k�E'ò&k�E]ò�LBEWJ�ò&k�E]ò�L6V.ADð�[�k�E'j�C�[\J&j�V\[\E]X þ4õ`Y ��E]k�?]TBE]V.ò�óBJ�J�E]ò�[�I �BORAzf�EBfRIDAULBE'T^?BIDASXÚþ4õ`Y f ���)�7�� ���{ � �$� � �6�-{��/� ��e8���)� � �$ �!�ne6� 1�?{/�/� �;�� ��� ��� ����� �L� �a9-9 ���Ee����29 ��B �r;���9 � �4������9 �Ee>e�9 � ������+ �!�+����Bi� e6� 1��{��/� �D� �� � ����� �����a� �L9�B �/� �9 ����� �� �A@�bw9 � ��1�c �� f�EeEed9 � ���aK�ú�C óPjFJ ��ó6XFE]IzO[�kFEHj�Cb[\Jsj�V\[\E]X�þ'õ�Y ADV4?BV�V&j���E]X_[\ó���Eñ?Bò�[�AUTBE]I��Zò�óPCb[\J�óPISIUE]X � �¶?BCZ?BX�TBEWJ&V�?KJ��Bf���kFEHj�Cb[\Jsj�V\[\E]Xþ4õ`Y �Ú?�� CFóB[ ��E]k�?]TBEÛISAULBE<TK?BIDADX þ'õ�Y AUð:[�kFEÚþ'õ�Y k�?BV)�Ú?BIDð¹j�Chò�[�AUóPCFE]X ��E]òW?BjhV\E�óBð�EWJ�J&óBJ&VWOóBJ4AUð�AU[�k�?BV ��EWE]C¶V�ó ��E]kFó�> ?BIU[\EWJ�E]X � � [�kFEÁ?BXFTBEWJ&V&?KJ��Bf

�FóBJ'[�k�ADV7��J�ó��eIUE��¶OF?�V�A � �eIUE'V\óPISjF[�AUóPC¶V�j�òsk¶?BV�òW?BIDòWj�IS?K[�ADC���? ��E]V�V�?��BE<?BjF[�kFE]C�[�ADòW?K[�AUóPC_ò�ó6XFE�zYZõ4G óBð5[�kFEÂX�?K[�?HTK?BIDjFE'?BChX ?BXhXFJ�E]V�VWOR>�J&AD[�ADC��Á[�kFE �oX�?K[�?�TK?BIDjFEBOFY�õ4GB "�e?BAUJ[\ó�[�kFEÂ?BX�X�J�E]V�VWO?BC�X_jhV�ADC���[�kFEHY�õ4G [\ó òskFE]ò�L¶[�kFEHX�?K[�?�TK?BIDjFEÁóPC�E]?Bò&kZJ�E]?BX�OhX�ó�E]V'CFóB[�>.óBJ�L ø � �4Y * . .Kýxf ��kFE?�����J&óP?Bò&kÚXFóRE]V�CFóB[ ��J�EWTBE]C�[�J�E��hIS?��<?K[\[�?Bò&LRVY&�?BC�?BXFTBEWJ&V&?KJ��<òW?BC�J&E��hID?Bò�E@[�kFE �oX�?K[�?`TK?BIDjFEBOPYZõ4G �h?BAUJ òWjFJ�J�E]C�[�I��Ü?K[Û?BCÝ?BX�X�J�E]V�V�>4AD[�k ? X�A���EWJ�E]C�[ �h?BAUJÚ>'k�ADò&kÜ>@?BV ��J�EWT6AUóPj�V�I�� >�J&AU[\[\E]C [\ó [�kFE?BX�XFJ&E]V�VWf���kFE@E]V�V\E]C�ò�E@óBð�?BC�ó &ÛADCFE@ò&kFE]ò&LBEWJADV$[�k�?K[�?��\IUó�����óBðe[�kFE V\E4��j�E]C�ò�E óBð��:QFY ó���EWJs?K[�AUóPC�VADV8�Ú?BASCb[�?BADC�E]X_ADC �� E]X6övV�A#"WE]X [\Jsj�V\[\E]X_V\[�?K[\EHADC [�kFEÁòskFE]ò�LBEWJ]f

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC Q

Page 10: Incremental Multiset Hashes and their Application to Integrity Checking

� * � �ZSVUW$%��T� ������!:�c� � � � R�� �YW��A��PjFJ�E_ÿ V&kFó�>4VÚ[�kFE �h?BV�ADòL�> ?BC�X���<6> ó���EWJ&?K[�AUóPC�VWf$��k�E_ò&kFE]ò&LBEWJ��Ú?BASCb[�?BADChV<[¥>ó �<jhIU[�ADV\EW[k�?BV�k�E]V ?BC�X ?�ò�óPj�Cb[\EWJ�fFú�C ��E��ÚóBJ��BOFE]?Bò&k_Xh?K[�?�T^?BIDj�E`ASV.?BòWò�ó � �h?BC�AUE]X � � ?�[�A �ÚE`V�[�?�� �5fFg�?Bòsk[�A ��E�[�kFEÂò&k�E]ò�LBEWJB��EWJ�ð¹óBJ�ÚV.? =L!>Úó���EWJ&?K[�AUóPC5ORAU[ ?�����E]C�XhV�[�kFE`òWjFJ�J&E]Cb[@TK?BIDjFE�óBð�[�kFEÂò�óPj�C�[\EWJ �o?[�A ��EHV\[�?�� � �[\ó [�kFEHXh?K[�?ÛTK?BIDjFEBO�?BC�XZ>�J&AU[\E]V4[�kFE �oXh?K[�?ÛTK?BIDjFEBO�[�A ��EHV\[�?�� � �h?BAUJ'[\ó���E��ÚóBJ��Bf%9kFE]C�[�k�EHòskFE]ò�LBEWJ ��EWJ�ð¹óBJ�ÚV'?���<?>¶ó���EWJs?K[�AUóPC�OeAD[4J�E]?BX�V�[�kFE0�h?BAUJ`V\[\óBJ�E]Xi?K[Â?BCZ?BX�X�J�E]V�VWO�?BC�X�OAUð@CFE]ò�E]V�V�?KJ�BO°j���X�?K[\E]VÂ[�k�E ò�óPj�C�[\EWJ<V\óZ[�k�?K[ñAU[<ADVÁV\[\J&ASò�[�I�� �BJ&E]?K[\EWJ<[�k�?BC [�kFEÛ[�A ��EÚV\[�?�� � [�k�?K[>@?BV�J�E]?BX5f ��k�EB�<jhIU[�ADV\EW[�kh?BV�kFE]V.?KJ�E'j���X�?K[\E]X �l1�� �>4AU[�k � ( /��'/�� �[\J&A��eIUE]V:ò�óBJ�J�E]V���óPChX�ADC��Â[\óH[�kFE�h?BAUJsV@>�J&AU[\[\E]C óBJ'J�E]?BX¶ð¹J�ó � ��E���óBJ�Bf

��A��PjFJ&E)5ÁV&kFó�>4VkFó�> [�kFE�ò&kFE]ò&LBEWJ�A � �hIUE��ÚE]Cb[�V�[�kFE$G�>����!<Bö����F?JñASCb[\EWJ�ðo?Bò�EBf ��ó�ADC�AU[�AS?BIDA#"WE@[�kFEþ4õ`Y Ob[�kFE�ò&kFE]ò&LBEWJ�L!>�GÂ?BCÛASC�AU[�AD?BI6TK?BIDjFE�[\ó<E]?Bò&k ?BX�XFJ�E]V&VWf6%9kFE]CÚ[�kFE)�:QFY ��EWJ�ð¿óBJ��ÚV:? G�>����!<ó���EWJ&?K[�AUóPC�O°[�kFE ò&kFE]ò&LBEWJ��<?>�G [�kFE óBJ&A��PASC�?BI�TK?BIDjFE ?K[H[�kFE ?BX�XFJ�E]V&VWO�[�kFE]C�L�>�G [�kFE C�EW>-TK?BIDjFE[\óÛ[�k�E<?BX�XFJ&E]V�VWf;%9kFE]CZ[�kFE$�:QFY ��EWJ�ð¹óBJ�ÚV�?�����F6J ó���EWJ&?K[�AUóPC5O�[�kFE<òskFE]ò�LBEWJ���<6>�G�[�kFEñóBJsA��PADC�?BITK?BIDjFE`?K[ [�kFEÂ?BX�XFJ�E]V�V@?BC�X J�EW[�j�J&C�V.[�k�ADVT^?BISjFE`[\óH[�k�E �:QFYP0FAU[@[�kFE]C=L!>�GÁ[�kFEÂV�?���E`TK?BIDjFE@�h?Bò�L[\ó [�kFE ?BX�XFJ�E]V�V]f��°ó ò&kFE]ò&L [�kFE ADC�[\E��BJ&AU[ � óBð4[�kFE þ4õ`Y ?K[�[�kFE E]C�X óBð�[�kFE �:QFYPj�VHó���EWJs?K[�AUóPC�O[�kFE`ò&kFE]ò&LBEWJ ��<6>�GÂ[�kFE�T^?BIDj�E'?K[@E]?Bò&k¶?BX�X�J�E]V�VWO�[�kFE]C ò�ó � �h?KJ�E]V"!$#&%('*),+ -/.10_?BChX324)5-76/+4-8.10�fú�ð9!$#&%('&):+4-8.10ÝADVHE4��j�?BI.[\ó;24)5-768+4-8.<0�O5[�kFE¶òskFE]ò�LBEWJÛò�óPChòWIDj�XFE]VH[�k�?K[H[�kFE¶þ4õ`Y k�?BV ��EWE]C��E]k�?]T6ADC�� ò�óBJ�J�E]ò�[�I �Bf�ú�C�[\EWJ��E]X�AS?K[\E òskFE]ò�L6VÚòW?BC ?BIDV�ó ��E���EWJ�ð¿óBJ���E]X >'AU[�kÜ?iV&IDA��Pk�[�I�� ��ó6X�A E]X= H;< =?> ó���EWJ&?K[�AUóPC ø�G�dñQ!* .Pÿ^ýxfb��AUJ&V\[WO:AD[Úò�J�E]?K[\E]V ? CFEW>A@�%(BC):# ?BC�X�!$#&%('&):+4-8.10�f$��k�E]C�O:?BV��E���óBJ�iADV�J�E]?BX [\ó ��EWJ&ð¿óBJ� [�k�E�òskFE]ò�L�ODL!>�ó���EWJ&?K[�AUóPC�VÂ?KJ&E ��EWJ&ð¿óBJ�ÚE]XZ[\ó_j���Xh?K[\EH[�k�E�[�A ��EV\[�?�� �eV�ADC¶þ4õ`Y ?BC�X¶[�kFEÁC�EW>E!$#&%('*),+ -/.10�f

n������¥�����v����u�F ��³^µ�� � Ó¿�z��´�� � �owvq&wx������¦GIH ~�^��wx���z��w5�Kq&�z�^����¦?JLKNMPONQ<RTS�UWVÂq&� �YX Q1S�Z�R[S�UWV6�m¿�^��wx��qs����y�rBt&wx��~.����wx���z�¥w5�Kqs�z������q&ux�T\]�G^] ��tN�^�Wwx��u\¦`_/Mba7Q<KR�]m¹����wx�Öq&����y�_/McadQ<K`���8\]�

e ×WÆ ±gf�tih�²�¤�ux��wx���$q�Nq&�����jh wxt q ��� ux���z�df����`~ ��~ t&uzyb¦] �.p��¥w7k�rB�$wx�^������uzux���Ww5�sqs���^��t&{8_/McadQ<KR� £ ux��wx� ±ghPtlkx²ewxtmf4���`~ ��~ tsuzyW�H �¯$� � q&wx�jJnKNMbONQ<R[S�UWV6¦?JnKNMbONQ<R[S�UWVpo[q*r �Kq&�z�R±gf�tlhPtikz²¥�

s ÅNÆ ±gf�²�ux�\q � �5wx�����sqs���^�:q�w$q �^� ux���z�df4���`~ ��~ tsuzyP¦] �Ñ��\q � ±ghPtlkx²e{ÖuxtN~�f�����~ ��~ tsuzyW�H �¯$� � q&wx� X Q1S�Z�R[S�UWV6¦ X Q<S�Z�R[S�U�Vpo q r �Kq&�z�R±gf�tlhPtlkz²¥�t �"_/Mba7Q<K�r ~�q&µb±u_/MbadQ?KR�vk�o ] ²¥�

A����R¢xwP¢ e ×WÆ qs� � s ÅsÆ ts�B��uvq&wx��ts�^�

c.E]òW?Bj�V\E [�kFEiò&kFE]ò&LBEWJ_ò&kFE]ò&LRV [�k�?K[�!$#&%('*),+ -/.10 ADV E4�Rj�?BI�[\ó�2 )y-768+4-8.<0�O:V�j��hV�[�AU[�jF[�AUóPC�¹[�kFE_þ'õ�Y J�EW[�jFJ&C�V�?iTK?BIDjFE [�k�?K[ÚADV�CFEWTBEWJ�>�J&AD[\[\E]C [\ó AD[� ñ?BChX J&E��hID?�� �¹[�kFE¶þ4õ`Y J&EW[�jFJ&C�V�?V\[�?BIUEZT^?BISjFEZADChV\[\E]?BX óBðÁ[�k�E�óPCFEi[�k�?K[ ASV ��óPV�[ÛJ�E]ò�E]C�[�I�� >�JsAU[\[\E]C �?K[\[�?Bò&LRV¶óPC [�kFEiþ4õ`Y ?KJ�E��J�EWTBE]C�[\E]X�f4�4kFE8�hjFJ���óPV\E@óBð�[�kFE [�A �ÚE�V\[�?�� �hVADV�[\ó ��J�EWTBE]C�[:J�EWóBJsXFEWJ&ADC��Á?K[\[�?Bò&LRV.ADC�>4khADò&kÚþ'õ�YJ�EW[�jFJsC�V�? T^?BISjFE¶[�k�?K[Úk�?BVÚC�óB[ ��EWE]CÜ>4J&AU[\[\E]C �BEW[ V�ó [�k�?K[ÚAU[ÚòW?BC V�j��hV\E4�RjFE]Cb[�I � J�EW[�jFJsC V\[�?BIUE

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC A

Page 11: Incremental Multiset Hashes and their Application to Integrity Checking

����� Æ � Ì�� ��� Å ±S²����^��wx��qs����´����°Ñ�$l<�] � e ×WÆ ±gf ti\�²�{­t&u$�\q&�¥��q ��� ux���z�7fB�

Í�Æ� �WÅ ±gf�tih�²��owxt&ux���dh'q�w°q �^� ux���z�dfB�] � s ÅNÆ ±gf^²¥�H � e ×WÆ ±gf tlh�²¥�

���ÌsÕ ±gf�²H��t�q � �5wx�^� � q&wvq.�sqs���^�:q�w°q �^� ux���z�dfB�] � hCr s ÅNÆ ±gf�²¥��Ñ°�¥wx��ux� h�wxtwx�^���\q&�����¥u\�H � e ×WÆ ±gf tlh�²¥�

� Î]Å ��� ±S²��v�^���v�]����{Fwx�^��Ñ���l �^qs�5rB���Kq\��� � ��t&uzux����wx��yH±Dq�w5wx�^����� � t&{FtN�B��uvq�wx��tN�B²¥�] � s ÅNÆ ±gf^²�{|tsu��\qs�v�Âq �^� ux���z�7fB�H �m¿{dJnKNMbONQ<R[S�UWV`������Ø]�^qs�Pwxt X Q1S�Z�R[S�UWV6�Wux��wx��ux�4wzux�^�N�

A����R¢ �P¢ Ð°Þ ���^�����Wwx���sux��w¹y4�v�^���v�]���^�@t&{6uvqs� � tN~ q&�������z��~ ��~ t&uzy

X�?K[�?6feQ6j�����óPV\E4>.EÁò�óPC�V�ADX�EWJ.[�k�E L!>Û?BC�X3��<6>Úó���EWJ&?K[�ADóPC�V.[�k�?K[ óRòWòWj�J óPC¶?0�e?KJ�[�ADòWj�ID?KJ ?BX�X�J�E]V�V?BV'óRòWòWjFJ&J&ADC��ÚóPCi? [�A ��E]IDADC�EBf+��ADCFE�5ÛADC_[�kFE9��<?> ó���EWJ&?K[�ADóPC�E]C�V&jFJ�E]V�[�kh?K[WOeð¹óBJ'E]?Bòsk G2>5� �!< ?BC�X���F?J ó���EWJ&?K[�AUóPC�O�E]?Bò&k >4J&AU[\E<kh?BV�? [�A �ÚEHV\[�?�� �i[�kh?K[`ASV�V�[\J&ADò�[�I�� �BJ�E]?K[\EWJñ[�k�?BC ?BIDI�óBð[�kFEH[�A ��EV\[�?�� �eV"��J�EWT6AUóPj�V&I��ñJ�E]?BX ð¹J�ó � ��E��ÚóBJ��Bf ��k�EWJ�EWð¿óBJ&EBOP[�kFE J&V\[:[�A �ÚE4?BC ?BX�TBEWJ&V�?KJ���[�?�� ��EWJ&V�>4AU[�k? �h?KJ�[�ADòWj�IS?KJ��oX�?K[�?ZT^?BISjFEBO�[�A �ÚE V\[�?�� �� )�h?BADJñ[�k�?K[�ADVÁJ&E]?BX ð¹J�ó � ��E���óBJ��BO$[�kFEWJ�E >4ADIDI�CFóB[0��E?BC E]C�[\J�� ADC [�kFE�!$#&%('*),+ -/.10 �Ú?K[�ò&k�ASC���[�kFEÂ?BXFTBEWJ&V�?KJ���j�V@E]C�[\J�� ASCÛ[�kFE 24)5-76/+ -/.10�OR?BC�X [�k�?K[E]C�[\J�� >4ADIDI�CFóB[ ��EÁ?BX�XFE]X [\óÛ[�kFE !$#&%('*),+ -/.10 ?K[4?ÚIS?K[\EWJ�[�A ��EBf

��k�E�@p% B�)y# ADV CFóB[�V\óPIDE]I�� j�ChXFEWJ@[�kFEÁò�óPCb[\J&óPI5óBð$[�kFEÁò&kFE]ò&LBEWJ]Oe?BChX¶ADV ?�ð¹jhC�ò�[�AUóPC óBð°>'k�?K[�ADVJ�E]?BX ð¿J&ó � ��E��ÚóBJ��BO�>'k�ADò&k ADV.j�Cb[\Jsj�V\[\E]X�f4�4kFEWJ�EWð¹óBJ�EBO�[�k�EC!$#&%('*),+ -/.10_òW?BChCFóB[ ��E �Pj�?KJ&?BC�[\EWE]X[\ó ��E�ó�TBEWJ�?�V\EW[Wf �FóBJHE � ?�� �hIUEBO5ð¹óBJñ?ZV\E4��j�E]C�ò�EÚóBð V\[\óBJ�E ?BC�X IUóP?BX ó���EWJs?K[�AUóPC�VÂó6òWòWjFJ�J&ASC��¶óPC[�kFE4V&?���E'?BX�X�J�E]V�VWOb?BC ?BXFTBEWJ&V�?KJ��òW?BC XFE]ò�J�E]?BV�E4[�kFE'[�A ��E4V\[�?�� �Û[�k�?K[.ADV:V\[\óBJ�E]X ADC ��E��ÚóBJ��Ú?BC�Xk�?�TBEÚ[\J&A��hIDE]V ��E�?BX�X�E]X [\ó_[�kFE�!$#&%('&):+4-8.10 �Hj�IU[�A��eIUE<[�A ��E]VWf ��kFE�24)5-76/+4-8.10 òW?BC ?BIDV�ó�CFóB[��E �Pj�?KJ&?BC�[\EWE]X [\ó ��E�ó�TBEWJ@?<V\EW[ ��E]òW?Bj�V�E�[�kFE'?BX�TBEWJ&V�?KJ��Úò�óPC�[\J�óPIDV[�kFEB�e?BAUJ&V�[�k�?K[.?KJ�E4J&E]?BXÚð¹J�ó ���E���óBJ�Bf ��kRj�VWO�V�EW[�övò�óPIDIDADV�ADóPC J�E]V�ADV�[�?BC�ò�E ADVñCFóB[<V�j��ÛòWAUE]C�[WO�?BC�X >.E J�E4��jhAUJ�E �Hj�IU[�ADV\EW[�övò�óPISIDADV�AUóPCJ�E]V�ASV\[�?BCb[�kh?BV�k¶ðoj�C�ò�[�AUóPC�V]f

��k�E)��J�óRóBð°óBð$[�kFEÁð¹óPIDIUó�>4ADC���[�kFEWóBJ�E�� ADV�ADC¶õ ����E]C�X�A � g�f��� �Y%pWi�YS���*-, ���� 7��i ����B���� ������ � � :9 �O;��#� �=bw9�� l � � 1��B �LB ��92@��/�'eK� ���� 7��c ��� B����AJ ������+� � :9��<;�� � �|9 ���Ee �o9 �dB Bi�LB �d92@EK�M(�� ���zj�� �������� � 1��!$#&%('*),+ -/.10 �/�'e�� �������� � 1�24)5-768+4-8.<0]K x;�$;E;!�����i ���c�6��� � ���4� � 1�M� �?� � �>eEe�9 � ���i��9 �c�/�_�/�� �a9 ��� �l�/� � � L!>�G �/�'e ��<6>�G K��� �������)� e6��� �$��� y7�� ���{/��� �#� �r{�� � ��e ���e�8jb ��� ��� ����=K

��k�EÚð¿óPISIUó�>4ASC��_ò�óBJ�óPIDID?KJ� V&kFó�>4Vñ[�kFE kh?KJ&X�CFE]V�VÁóBð7�hJ�E]?KLRASC��_óPjFJ<ó &ÛADCFE �ÚE���óBJ�� ADC�[\E��BJ&AU[��ò&k�E]ò�L6ADC��ÛV�òskFE���EBf� %'W$%Tu&u&s+W$v 3 *0M���BN;!�L9�� ��H�b3� � �������e� b3� ��/�!n7�� � ��H�e?�4 � �4 �ze_� �M��� ��d9fe ����Pb�'e/� ��H ���� ��� � � � � ��� ����Y����9$ ���-B���� �����4 ������� � �����4 �l�/�'K

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC û

Page 12: Incremental Multiset Hashes and their Application to Integrity Checking

��k�EZóBJ&A �PADC�?BI�ó & ADCFEZòskFE]ò�LBEWJiADC(ø c@g@d * û6÷�ýÂX�A���EWJ&VÛð¹J�ó �/óPjFJ A � ��J&ó�TBE]X9ò&kFE]ò&LBEWJ�ADC [v>.óJ�E]V ��E]ò�[�VWf ��AUJ&V\[WOe[�kFE�óBJ&A��PADCh?BI�ò&k�E]ò�LBEWJñADV'A � �hIDE���E]Cb[\E]XZ>4AU[�kU,�ö.�hAS?BV\E]XZkh?BV�kið¹j�Chò�[�AUóPC�V<ø ù�ù`û/.Kýxf��kFE]V�EÛk�?BV�k ðoj�C�ò�[�ADóPC�VÁ?KJ�EÛV�EW[�övò�óPIDIDADV�ADóPC J�E]V�ADV�[�?BCb[ñ?��P?BASC�V\[ñJs?BC�XFó � EWJ�J&óBJ&V)�hjF[<CFóB[ñ?��P?BADC�V�[<?�Ú?BIDASòWAUóPj�VH?BXFTBEWJ&V�?KJ��Bf�QRE]ò�óPChX�I��BO$[�kFE @�% B�)y# ADV�ADC�ò�J�E��ÚE]Cb[\E]X óPC E]?Bò&k L!> ó���EWJ&?K[�AUóPCÜ?BC�XÜADVCFóB[�?�ðoj�C�ò�[�ADóPC óBð >4k�?K[�ADVñJ�E]?BX ð¿J�ó � ��E���óBJ�Bf���k�E @�%(BC)y#ÝADVHV\óPIUE]I�� j�C�X�EWJñ[�kFE ò�óPCb[\J&óPIóBð[�kFE�ò&kFE]ò&LBEWJ]f ��k�ASV ��E]?BC�V�[�k�?K[�[�kFE �h?BAUJ&V4[�k�?K[�?KJ&EHj�V�E]X_[\ó¶j���X�?K[\E !$#&%('&):+4-8.10 ð¿óBJ� ? V\EW[Wf��kFEWJ&EWð¿óBJ�EZV\EW[�övò�óPIDIDADV&AUóPC J�E]V�ASV\[�?BC�ò�E�ADVÛV�j��ÛòWAUE]C�[Wf ��k�E_óBJ&A��PADCh?BI@ó &ÛADCFE�òskFE]ò�LBEWJ¶òW?BC ��E �Ú?BXFEV\E]òWjFJ&E)� �¶j�V�ASC���?�V\EW[�övò�óPIDIDADV&AUóPC J�E]V�ADV�[�?BCb[B�Hj�IU[�ASV\EW[ k�?BV�k¶ðoj�C�ò�[�AUóPC5f

ú�['ADV4>óBJ&[�k ��E]C�[�AUóPC�ADC��ÛkFó�> [�kFE<[v>.ó ó &ÛASCFEñò&k�E]ò�LBEWJ&V`òW?BC ��E<ó���[�A �ÚA "WE]X¶>4kFE]C�[�kFEWJ�E<ASV4?òW?Bò&k�E`ASC�[�kFEB�hJ�óRò�E]V&V\óBJ]f�c.óB[�k ò&k�E]ò�LBEWJ&V@>.óBJ�LÚV�A �ÛADID?KJ&I��Bf���k�E'òW?Bò&k�E�ò�óPC�[�?BADC�V.óPC�I���X�?K[�?ñT^?BISjFE]VWO>4k�ASò&k ?KJ�E�[\J&j�V\[\E]X ��E]òW?Bj�V\E�[�kFE��i?KJ�E�óPC6övò&khA��5f�ú�C E]V�V�E]C�ò�EBO�>4kFE]Ci[�kFE�òW?Bò&kFE ��J&ADC��PV�ADCi? X�?K[�?TK?BIDjFEBO�[�kFEÛòskFE]ò�LBEWJ���<6>�GÛ[�k�EÛX�?K[�?_TK?BIDjFE�ð¹J�ó � [�k�EÛ?BX�XFJ�E]V&VÁ?BC�X òW?BòskFE]V<AD[Wf9% kFE]C [�kFEÚòW?Bò&k�EEWT6ADò�[�V�?<X�?K[�?ÁTK?BIDjFEBOP[�k�E4ò&kFE]ò&LBEWJ =L!>�G`[�kFE'X�?K[�?ÁTK?BIDjFE [\ó<[�kFE'?����hJ�ó���J&AD?K[\E�?BXhXFJ�E]V�VWf ��kFE�òW?Bò&k�Ek�AU[�J&?K[\E�ö�[�kFE�ð¹J&?Bò�[�AUóPC óBð��:QFY ó���EWJ&?K[�ADóPC�V�[�k�?K[ C�Xi[�kFE]AUJÂX�?K[�?�ADCi[�kFE�òW?Bò&kFE�ö4ASV'[�k�EÚV�?���Eð¹óBJ ��óB[�k V�ò&k�E���E]VWO�?BC�X AU[<ADVH?Bò�[�j�?BIDI � [�kFE V�?���E ?BV<ð¹óBJ�[�kFE��h?BV\E���J�ó6ò�E]V�V\óBJH>4k�ADòsk XFóRE]V�CFóB[��J�ó�TRASXFE ��E���óBJ�� ADC�[\E��BJ&AU[ � òskFE]ò�L6ADC�� �ÚE]ò&k�?BC�ASV��ÚVWf�ú�C ��óB[�k V�ò&k�E���E]VWO:[�kFE ��J&ADC�òWA �h?BI ��EWJ�ð¹óBJ\ö�Ú?BC�ò�E ó�TBEWJ&k�E]?BX >'kFE]C V\E4�RjFE]C�ò�E]V<óBð8��E���óBJ�� ó���EWJ&?K[�AUóPChVÁ?KJ�E òskFE]ò�LBE]X ò�ó �ÚE]Vñð¹J�ó ��J&E]?BX�ADC��?BC�XÛ>�J&AU[�ADC��Â[�A ��E'V�[�?�� �hV'ø�G4dÁQ * .Pÿ^ýxf �4kFE4A � �hJ�ó�TBE]X ó &ÛADCFE'ò&kFE]ò&LBEWJ�A � ��J�ó�TBE]V:óPC [�kFE4óBJsA��PADC�?BIò&k�E]ò�LBEWJ ��E]òW?Bj�V\E @�%(BC):# ADV�CFóB[ÛASC�ò�J�E���E]C�[\E]X óPC EWTBEWJ�I����F?J ?BC�X G2>5� �!< ó���EWJ&?K[�ADóPC�f ��kRj�VWO[�A ��E V\[�?�� �hVÁòW?BC ��EÛV��Ú?BIDIDEWJÂ>4AU[�kFóPjF[ÁASC�ò�J�E]?BV�ADC�� [�k�EÛð¹J�E4��j�E]C�ò �ZóBð òskFE]ò�L6VWO$>4k�ADòsk A � ��J�ó�TBE]V[�kFE ��EWJ�ð¹óBJ�Ú?BChò�E�óBð�[�kFEÁòskFE]ò�LBEWJ�f

� ^ ë�è�î!V¥íbaKïxë°è

% E`k�?]TBE`ADC�[\J�óRXhj�ò�E]XÚADC�ò�J&E���E]Cb[�?BI �<jhIU[�ADV\EW[�kh?BV�kÚðoj�C�ò�[�AUóPChV�>4k�ADòskÚòW?BC ��E'E��ÛòWAUE]C�[�I���j���X�?K[\E]X�O?BC�X�ð¹óBJ:>4khADò&k�[�kFE óBJsXFEWJ&ADC��ÂóBð�ADC��ejF[�V�ADV:CFóB[:A � ��óBJ&[�?BCb[Wf �$?��hIUEÁ÷�V&j�� �Ú?KJ&A "WE]V�óPjFJ�ò�ó � �h?KJsADV\óPCóBð$[�kFE)�<j�ID[�ADV\EW[ k�?BV�k ðoj�C�ò�[�AUóPC�V@ADC�[\J�ó6X�j�ò�E]X ADC [�k�ADV �e?���EWJ�f�ú�C [�kFEÂ[�?��hIUEBO6>.EÁADC�X�ASòW?K[\E�>'kFEW[�kFEWJ[�kFE4V�E]òWjFJ&AU[ ��ASV$�h?BV\E]XÛóPC �hV\E]jhXFóBJ&?BC�XFó � ðo?��ÚADI �<óBð�k�?BV�kÚð¹j�Chò�[�AUóPC�VB���þ �" sOb[�kFE4J&?BC�XFó ��óBJs?BòWIUE��ó6XFE]I �oþ-' sO:[�k�E�X�ADV�ò�J&EW[\E�IUó�� ?BV�V&j�� ��[�AUóPC �o=�� sO�óBJ��^?BC�XÝ[�kFE_k�?KJ&XhCFE]V�V�óBð`[�kFE_>.óBJ&V\[ òW?BV\EV�kFóBJ&[\E]V\[5TBE]ò�[\óBJ���J�ó��hIUE�� �xQ 1 sf]ú�ðRkh?BV�kFE]V5?KJ�E�[\ó ��E�TRADV&A��hIUE$[\ó�[�kFE:?BXFTBEWJsV�?KJ�� �oAzf�EBfUO][�kFE?BXFTBEWJ&V�?KJ��òW?BCiV\EWE<[�k�E<k�?BV�k�E]V4ADC¶[�k�Eñ[\J&j�V�[\E]XZV\[�?K[\EBO �hjF['òW?BC�CFóB[ ��óRXhAUð � [�kFE�� sOe>EHADC�X�ASòW?K[\EÁ>4kFEW[�kFEWJ`?J&?BC�X�ó �-CFóPC�ò�E��^ò�óPjhCb[\EWJ �Z�4 sObóBJ.E]C�ò�J�� ��[�AUóPC ADV�CFE]ò�E]V&V�?KJ��Bf% E�k�?�TBE�A � ��J�ó�TBE]XÚ[�kFE�V\E]òWjFJ&AU[ �Ú?BC�X[�kFE ��EWJ�ð¹óBJ�Ú?BChò�E�óBð�[�kFE�ó &ÛADC�E ��E���óBJ���ADC�[\E��BJ&AU[ ��òskFE]ò�LBEWJ ADCZø c.g@d * û6÷�ýe?BV�óPCFE4?����eIDADòW?K[�AUóPC�óBð[�kFE]V\E ðoj�C�ò�[�ADóPC�VWf/% E4?KJ�E4òWj�J�J�E]C�[�I��<ADC�TBE]V\[�A��P?K[�ASC��ÁkFó�> �<j�ID[�ADV\EW[�k�?BV�k�ðoj�C�ò�[�AUóPChV�òW?BC ��E@?����hIDAUE]XADC óB[�kFEWJ�?KJ�E]?BVWf3 � êPë�ë��Áë�� ^ ë(V Vvï aKïvë�è S TDaKï a�é W�è�î�T ë��`3 ì�ìïzéPï54 T�� í VzéPï a�TFé��_W9ai�

�5EW[�� h ��E�[�kFEÚðo?��ÚADI��ZóBð8�Ú?K[\J&ADò�E]Vñ>4AU[�k ÿih * �<J�ó�>4V]O � ò�óPIDj��ÚChVWO5?BC�X E]C�[\J&AUE]VÁASC <w< @ �¹J&E]òW?BIDIC�g1D ? g ÿ h sf'�5EW[ 68� ��EÁ?�J&?BC�X�ó � �Ú?K[\J&A � ADC� h � � 6 � /F6 X /F6��/ � � �~�Pfhù'óB[�ADò�E<[�k�?K[ 68�(ADV[�kFE��Zöx[�k �Ú?K[\J&A � ADC�� h f!% Eñ?BV&V�j���E`[�k�?K[ [�k�ASV8�Ú?K[\J&A � O6óBJ�E4��jhAUT^?BIDE]Cb[�I�� AU[�V ID?���E]I � OFADV V�E]ò�J�EW[?BC�X óPC�I�� ?BòWò�E]V�V�A��eIUE � �Û[�k�EÁV\E]òWjFJ�E ��J�ó6ò�E]V�V\óBJ�f �4kFE'ðo?��ÚADI �ÚóBð �Ú?K[\JsADò�E]V � h ð¿J&ó � >'k�ADò&k�68� ADVV\E]IUE]ò�[\E]XZADV �hj��eIDADòWI���L6CFó�>'C�f

��k�E�J&ó�>4V óBðh68�(?KJ�EÁID?���E]IUE]X � � �0�8��.�/]÷i� h * � ?BC�X¶XFE]C�óB[\E]X � ��68� �!�� sf���k�ASVJ&E���J�E]V\E]C�[�V6 � ?BV�?Úðoj�C�ò�[�AUóPC_ð¿J�ó � ������.�/]÷i� h * � [\ó<>< ?@ Oh[�kFEHV\EW[4óBð�TBE]ò�[\óBJsV'>'AU[�k�IUE]C��B[�k2�:?BC�X�E]Cb[\JsAUE]V+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷�.

Page 13: Incremental Multiset Hashes and their Application to Integrity Checking

��tN�������z��tN� ����y �z������ux��w¹y ��tN~ ����w\� �����^�swx�'ts{ t&Þ ���^� �^��� � � � {­tsuux���z���owvqs����� rKq&�z� � ts� ��¾ ����������y tN��wx����w �v�^���v����u �]���z��r����:�^qs�z�

Ã�ÄNÅNÆWÇsÈ]É&Ê�Ç�Ë�ÌWÍ�Î �z��w � %�Ñ�� o[o o t&ux���s���Kqs� z������^�¥uzy���wx��tN�Ã�ÄNÅNÆWÇsÔ�Õ�Õ]Ç�Ë�ÌWÍ�Î ~.����wx���z��w � %�Ñ�� o[o o rBt&wx� z������^�¥uzy���wx��tN�Ã�ÄNÅNÆWÇ&Ã�×�Ç&Ë]ÌWÍ�Î ~.����wx���z��w ! Ñ�Ð�����p � o rBt&wx�Ã�ÄNÅNÆWÇ&ÙWÔ�Õ�ÕWÇ&Ë�ÌWÍ�Î ~.����wx���z��w ! Ñ�Ð��N� # o � rBt&wx�

C� ^� à �K¢ }�tN~ �^q&ux���ztN�`t&{Fwx�^�:l�����wx���z�¥w�'$qs�z�����^�^�¥wx��ts�^�

ADC <>< @ fhú�C��hJ&?Bò�[�ADò�EBO 6��(ASV4CFóB[�?Ûò�ó � �hIDEW[\E]I�� J&?BC�XFó � �Ú?K[\J&A � ó�TBEWJ`<>< @ O��hjF[{68� ADV�V\E]IDE]ò�[\E]Xð¹J�ó � ? �hV\E]j�X�óBJ&?BC�XFó � ð¹?��ÚASI�� óBð�ð¹j�Chò�[�AUóPC�VWf;% E�?BX�X�J�E]V�V�[�khADV4ADV&V�jFE<?BV�V\óRóPCZ?BV�>.E<?KJ�EHJ�E]?BX��[\óÚð¹óBJ�Hj�ID?K[\EÁ? ��J&ó�óBð$óBð��4kFEWóBJ�E���÷Kf

��k�EÁð¿óPISIUó�>4ASC���[�kFEWóBJ�E�� ADV�?���óPjF['[�kFE ��J�ó��e?��hADIDAU[ �Û[�k�?K[�?BCZ?BX�TBEWJ&V�?KJ�� C�XhV�?Ûò�óPIDISADV�AUóPC ð¹óBJV\ó ��E �Hj�IU[�ASV\EW[� � f���kFE ��J&ó��h?��hADIDAD[��ÚADV@[�?KLBE]C�ó�TBEWJ4Js?BC�XFó � �Ú?K[\J&ASò�E]V�68� ASC� h �[68� ! � h ?BC�X¶[�k�EÂJ&?BC�XFó �ÚC�E]V�V óBð$[�kFEÁJ&?BC�X�ó ��CFóPC�ò�Eñj�V�E]X¶ADC?.��<f��� �Y%pWi�YS ��*-, ��� �/�'e� � 7��_B���� �����4 �)� �`��K+, �����7��) ����HE9 ��� � � ����B�B �/��e/�&{���� ��9 � � D�/�'e ���6� �c� �- �!��e/� � �a9 � ��� � �7c �� ^=��� c<j'�4�}��K����#{ � ���2���db �#�zeZH=�+� ���7 �[;��#� �'øI $ 0�.�� �� $ vý�j ����;'9 �>7��>7 � � � :@ �� w ��� � ���/� � �����l�/� ����9N�� � �$� �B ��� �� X��Kÿ h 1 ����� D ? K

% E JsV\[ADC�[\J�ó6X�j�ò�E�V\ó ��EÂCFóB[�?K[�AUóPC�f��5EW["���Z�$/z ��E'[�kFE�TBE]ò�[\óBJ�óBð�IDE]C��B[�k¶ÿih * � XFE CFE]X � �� �Z�i/z ������ ��� � ÷ÁAUð$?BC�X¶óPC�I�� AUðw���1�

?BC�X���Z�$/z � � � ��� ���� �

�5EW[ � �� 7��EÂ[�kFEÁTBE]ò�[\óBJ�óBð$IUE]C��B[�k�ÿih * �4XFE CFE]X � ������ ����� ��� � .Û?BC�X3� �� � � � ��� �����f

���YS�SVs�(p*?C �<F! ����b3���YH¶øI 0N.��0�� vý � ����"����&{��/� � �D 1���2���db3����H

ø ���Z�$/z 0�� �Z�i/z �68� ��óRX D�ý �C1� �AF�. � �� �6 3 ��. � ���� -� �e�/�Te �/�;�G@ � �T� �� �6 � �I������ �6 � B �[e/�����;D �/�'e 0 ��NPO ��]�0 ��N�O �� B �Ze/�����lCNK#�9 �4� �LK`ù'óB[�ADò�E'[�kh?K[ ���Z�$/z E]C�ò�ó6XFE]V��6O�+O6?BC�X�ORkFE]C�ò�EBOR[�kFE'òW?KJ&XhADC�?BIDAU[ � 0 ��NPO ��:óBð+O6?BC�XCFóB[�ADò�Eñ[�k�?K[

.�� �� ]� I ���Z�$/z �68� ��ó6X�D 0;L��N�O �� ��óRXC 0R� S �

��kFEÁIDE�� �Ú?�ð¹óPIDIUó�>'V A � ��E]X�AS?K[\E]I��Ûð¹J�ó ��[�kFE]V�EÁó��hV\EWJ�TK?K[�AUóPC�V]f$ n��^���&ux�\q&wx���ow°��ts~ ~ tN� � ���]���zt&u�ts{y\¤5��wx�Âq�BtN�z��wx���������]wx���N��u&%������\ØW�Kq&�Bwxt'%z�

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷B÷

Page 14: Incremental Multiset Hashes and their Application to Integrity Checking

Q6j�����óPV\EÚ[�k�?K[�?BC ?BX�TBEWJ&V�?KJ�� IDE]?KJ&C�V �Ü[�j��eIUE]V øI%$ 0 .�� �� $� vý@óBJ]O°?BòWò�óBJ&XhADC��i[\ó���E�� �Ú?÷Kf �oA sO � TBE]ò�[\óBJ&V����Z� $ /z $ �[\ó��BEW[�k�EWJÁ>4AU[�kZ[�kFE�ò�óBJ�J�E]V ��óPC�X�ASC�����Z� $ /z $ �6�� ��ó6X�j�IUó�D�fT��EW[ ���E¶[�kFE � " ÿih * � �Ú?K[\J&A � >4AU[�kÜJ�ó�>4V����Z� $f/z%$ sf ��kFE]CÜ[�kFE �Û?K[\J&A � >'AU[�kÜJ�ó�>'V�� �Z� $ /z $� �68�ADV`E4�Rj�?BI�[\ó � 68�ñf°G@IUE]?KJ&I��BO � ��ó6X�j�IUó�D k�?BVÂðoj�IDI°J&?BCFL�ó�TBEWJ�<>< @ AUð?BISI � $ ?KJ�EÚX�A���EWJ�E]C�[Wf ��kFE��J�ó��e?��hADIDAU[ �Ú[�k�?K[�[�k�EWJ�EÁ?KJ�EÁ[¥>ó E4��j�?BI � $ j�V�ADV ?K[ ��óPV\[ � X��Kÿ h f���YS�SVs � *}M(�!�N;'9 �>7 ��7 � � � :@h �� ���;� $�� ������9o9 � �l;!�/�'e/� ��HU1�?B � :9 ��� � ��9 � �/� �e � �)�L9 ���D�� ��� � � ��� .÷R^ � X��Kÿ h K

c7���5E�� �Ú? ÷Kf �oASA sO:ADCÜóBJ&XFEWJ�[\ó C�X ? ò�óPIDIDADV&AUóPC ð¹óBJ� � O�[�k�E_?BXFTBEWJ&V�?KJ��ÜCFEWE]X�VÚ[\ó C�X ?�Hj�IU[�ADV\EW[c �����BV�j�ò&kñ[�k�?K[d���� �68���I������ �68� ��ó6X�j�IDóeD ?BC�XÁV�j�òskÂ[�k�?K[°[�kFE:òW?KJ&X�ADCh?BIDAU[�AUE]VóBðp ?BC�X� � ?KJ�EE4�Rj�?BI�[\ó'óPC�E?BCFóB[�kFEWJ$��ó6X�j�IDó C�f���kFEC�E � [°[�kFJ�EWE@IUE�� �Ú?BV°V�kFó�> kFó�> XhA��ÛòWj�IU[[�k�ADV ASV ð¿óBJ4[�kFEÁ?BXFTBEWJ&V�?KJ� ADð°kFEñASV ADC [�kFEñV�AD[�j�?K[�AUóPC óBð$[�kFE ��J�EWT6AUóPj�V IDE�� �Ú?6f

���YS�SVs�3�*�, ��w � �'e=���7�� B����� � �4�� ��� �4��K_M(���_;'9 �>7��>7 � � � :@h �� j���� �6 � � ������ �6 �B �Ze/���#��DY��� � 1�6 � � � ���/���G@ ���Te?��;!���'e?���D+� �i ����������b � �qeZH� � �c� � �����]9 �/� �0B �6:9���� � �d{/�a9�< < @���d929 � ��;��/�'e/� ��HK1�?e/� � �a9 � �D � $ � � �/�'e ���r������b � �qeZH� � � \?� � 6�� B �Ze/����� D`K#�9 �4� �LK)% f�Izf�óFf �Ff��o?Kð¿[\EWJ�J�EWóBJsXFEWJ&ADC��'[�kFE@ò�óPIDj��ÚC�V°óBð � ?BChX<[�k�E.ò�óBJ�J&E]V ��óPC�X�ADC��4E]Cb[\J&ADE]V°óBð:� �� T^� ���� @?BC�X¶ò�óBJ�J&E]V ��óPC�X�ADC���J�ó�>4V óBð 68�@ �Ú?K[\J&A � � k�?BV [�kFEÁð¹óBJ� � � ��� � � sO�>'kFEWJ�E�ÛASV [�kFE� " � ASXFE]Cb[�AD[�� �Ú?K[\J&A � OR?BC�X���� ^ � �� � �k�?BV[�kFE�ð¿óBJ� � .4� sO6>4kFEWJ�E).<ASV�[�kFE�?BIDI�"WEWJ�ó<TBE]ò�[\óBJóBð�IUE]C��B[�k �°fh=�E]CFóB[\Eñ[�kFEÂ[\ó�� ��J�ó�>4V�óBðk68� � �6 �� ?BC�X_IDEW[�6 �� ��EÁV�jhò&k¶[�k�?K[6����� 6 ��6 �� � �G@IUE]?KJsI��BOF[�kFEÂE4�Rj�?K[�AUóPC\?� � 68� �ÚóRX�jhIUó�D ADV@E4��jhAUT^?BIDE]Cb[ [\ó\?�16 �� 1 � � 6 �� ��óRX D � �l5

��kFEÂE4�Rj�?K[�AUóPCM.-� �(� �� k^ ������ �68� ��ó6X�j�IDó D ASV@E4��j�ADT^?BIUE]C�[ [\ó.-�I� 6 �� �ÚóRXD � � �

QR[\J&?BA �Pkb[\ð¹óBJ�>@?KJ&X ò�óPj�C�[�ADC�� [\E]IDIDV�j�VH[�k�?K[l�����d�[� � � c��l5 z�iADV�E4�Rj�?BI.[\ó [�kFE�� óBð@�Ú?K[\J&ADò�E]V 6 ��V�?K[�ADV�ð �6ADC�� � � ÁX�AUT6ADXFE]X � � [�kFEÛ[\óB[�?BI�� óBð8�Ú?K[\JsADò�E]V`6 �� fD��khADVÂADVÁADC [�jFJ&C E4�Rj�?BI�[\óZ[�kFE�� óBð�Ú?K[\J&ASò�E]V�68� V�?K[�ADV\ð �6ADC���� � @X�AUT6ADXFE]X�� � [�k�EÁ[\óB[�?BI�� óBð �Ú?K[\J&ASò�E]V 68�ñOF>4k�ADòsk¶ADV������d�[� � � z�Pf���YS�SVs �c*�, ��4 �/�Te0 � 7��}B����� � �4�� �M� �n��K�, �� ��7��M ����Hd9 � � � � �����B�B �/��e/�&{���� ��9M� �D � �'e7� �6���_� �i ���}e/� � �a9 � ��� � ��c ��e^ ��� c<j��|� ��K�M(��� � �(���� e^ ������ �68�^B �Ze/�����D[������;� � ��9oB��A@�e/��� :9 ��7��! �qe � � �u< <{?@ K#�9 �4� �LK �°ó ��J�ó�TBEñ[�k�ADV IUE�� �Û?6OF>EñV&kFó�> [�kh?K[�E]?Bò&k�E]Cb[\J�� óBð8�(� �� ^L� ���� �68� ��ó6X�j�IUó D ADVj�C�ADð¿óBJ�ÛI��_X�ADV\[\JsA��hjF[\E]XZADC � <>< @ f �5EW[��iJ�E���J�E]V\E]C�[`óPCFE�óBð.[�kFEÚò�óPIDj��ÚChV'óBð'6 � ?BC�X XFE CFE�ð¹óBJ� � <>< @ [�kFEñV�EW[ ���

�)� ��& �(���� ^ � �� � *�n� � ��ó6X�D � �Q6ADChò�E ��X�ADTRADX�E]V�E]?Bòsk E]Cb[\J�� óBð7���� ]^ ������ sOFAU[@?BIDV\ó�X�AUT6ADXFE]V�[�kFE �hJ�óRXhj�ò�[ �(���� ]^ ������ *��OkFE]C�ò�EBO

������ AUð � ADV�CFóB[ÂX�AUT6ADV�A��eIUE � � �hf�Q6ADC�ò�E!�_ADV'[�kFE0�BJ&E]?K[\E]V\[Áò�ó � ��óPC X�ADTRADV�óBJ4óBð DÜ?BC�X

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷]ÿ

Page 15: Incremental Multiset Hashes and their Application to Integrity Checking

E]?Bò&kÛóBð�[�kFE E]Cb[\JsAUE]V�óBð&� �� ^�� �� � sOP[�kFEWJ�E4E � ADV�[�V:?`TBE]ò�[\óBJ9��V�j�òsk�[�k�?K[ �(���� ^�� �� � *�=� ���ó6X�j�IUó'D�f:�4k�ADV ��J&ó�TBE]V5[�kh?K[ ��� �� �4AUðR?BChXÂóPC�I��ÂAUð��'XhAUTRASXFE]V � f��FóBJ�? �� E]XÁò�óPISj��ÚC��Y�T� � � �� �RO[�kFE �Ú?����hASC�� �?�

��� : �;^-� � � � � ADV? �hA a�E]ò�[�AUóPC5f�ô'E]C�ò�EBO6[�kFE�C�óPC6öxE�� ��[ � V\EW[�V ��� k�?]TBE`E4�Rj�?BIòW?KJ&X�ASC�?BIDAU[ �Bf(% E_ò�óPC�òWIDjhXFEÛ[�k�?K[�E]?Bòsk E]Cb[\J� óBð0�(� �� R^�� ���� �68� ��ó6X�j�IUó D ASV<j�ChAUð¿óBJ��ÚI��X�ADV�[\J&A��hjF[\E]X ADC �u<w< @ f���YS�SVs � *�, ��` �/�'e ��_7���B����� � �4�� � � ���?K,(�4���7�� ���-Hd9 � � � � ����B�B � ��e/�&{���� �d9�� �7D�/�'e7���6� �P� �c ���?e/� �)�a9 � ��� � ��c ��e^ ��� c<j��|����K ���#{ � ���2����b �#�zeZH=� � �c������� �w9 � � ��B � :9 ��� ���{ �a9�< < @ ����9o9 � �l;!�/�'e/� ��H 1�}e/� �)�L9 ���D � $ � ���/�Te=H �&{/���8�2����b � �qe[H=�c� �;\0� � 68� B �Ze/�����8D j� �!�;'9 �>7 ��7 � � � :@ �� /� �� �68���I� ���� �68� B �Ze/���#��D ��� � "4�!� �(1� ��� � D ? K#�9 �4� �LK`c7�5�5E�� �Ú?e5RO�V�ADC�ò�E"�Û?K[\J&A � � ò�óBJ�J&E]V ��óPC�X�V�[\ó4XhA���EWJ&E]Cb[ � $ j�V�?BC�X �(���� ^ � �� � � ��� V � � �.6Oh[�k�E ��J�ó��h?��eADIDAU[ �Û[�k�?K['[�kFEñJ&?BChXFó �ÚI�� ò&kFóPV\E]C �Ú?K[\J&A � 6��(V&?K[�ADV E]Ve. � �(���� �^ ������ �68���ó6X�j�IUó�D ASV'ADChXFE���E]C�XFE]C�[�óBð�[�kFE�L6CFó�>'IUE]X��BEHóBðe\0� � 6�� ��ó6XD�f�c ���5E�� �Û? �FO�V�ADChò�E 68�ADV@j�C�ADð¿óBJ�ÛI���X�ADV\[\J&A �hjF[\E]X�O��(� �� ]^ � ���� �68�(ADV@j�C�AUð¹óBJ�ÚI���X�ASV\[\J&A��hj�[\E]XÛADC � <><{?@ f�ô'E]C�ò�EBOF[�kFE��J�ó��e?��hADIDAU[ �ñ[�k�?K[�.r� �(� �� ^�� ���� �6 � ��ó6XD_ADV�E4��jh?BI�[\óñóPC�E4X�AUT6ADXFE]X � ��[�kFE'òW?KJ&XhADC�?BIDAU[ �óBð�� <>< ?@ OF>4k�ADòsk¶ADV E4�Rj�?BI�[\ó ����� D ? f

G.ó �0�hADChADC�� �5E�� �Ú?BV¶ÿ ?BC�X9ü ��J�ó�TBE]V ��k�EWóBJ�E��/üRf8�°ó �hJ�ó�TBE ��kFEWóBJ�E�� ÷Z>E CFEWE]X [�kFEð¹óPIDIUó�>'ADC���E � [\Js?ÚIUE�� �Ú?6f

���YS�SVs � * xD�[;>;������_ ��6�� �� 0� � ���� 0B �Ze/����� D j 0 ��NPO ��0� 0 ��NPO ��� B �Ze/���#�aCyj ��� ���d9fe/� ���/� � �l� � � �� �/�'e| � �d9 � + Cyj �/�'eK �� ) ��� B���� �<;�� � �4� �1� �i� �r ��9 � + D`K5M(����� ����lK

#�9 �4� �LK�ú�ð°[�kFEÁòW?KJsX�ADC�?BIDAD[�AUE]V.óBðw ?BC�X� � ?KJ�EÂE4�Rj�?BI ��ó6X�j�IUó C ?BC�X + CÝ[�kFE]CL��NPO V�`� L

��NPO �� � �zü

ú�ð$?BIDI�E]C�[\J&AUE]V�óBð/���� ?KJ�E + D ?BC�X � �� ]�I� ���� ��ó6X�j�IUó�D�OF[�kFE]C �� ����c1 � ��Dw/)�4�}�|/ �lO

ð¹óBJHADC�[\E��BEWJ&V � � � .6f�G.ó �0�hADChADC�� �zü ñ?BC�X �lO ��J�ó�TBE]V#0 ��NPO � �-� .6O�kFE]C�ò�EBO�?BIDI � �-� .6f % Eò�óPC�òWIDjhXFEÂ[�k�?K[N ����¿f

ù'ó�>(>Eñ?KJ&EÁJ�E]?BX�� [\ó ��J�ó�TBE ��kFEWóBJ&E���÷Kf

#�9 �4� �LK��5EW[�� �&.��) ��Ei? ��J&ó��h?��hADIDASV\[�ADò ��óPI��6CFó �ÚAD?BI4[�A ��E&�oADC k � g 5 k ?BI��BóBJ&AD[�k��/>4AU[�kóBJ&?BòWIUE ?BòWò�E]V�V_[\ó �&. � /21 3 ��/26 3 �7 sf8��kFE]CE� �&. � òW?BC �P?BADC LRCFó�>4IUE]X��BE ?���óPjF[ ?K[���óPV\[¶?��óPI��6CFó �ÚAD?BI�CRj��0��EWJ ��� k `[�j��hIUE]VÛøI%$ 0�.�� ��%$. vý �okFEWJ�E ����� ÁXFE]CFóB[\E]VH?���óPI��6CFó �ÚAD?BI sfg�hjFJ\ö[�kFEWJ�ÚóBJ�EBO � �&.�� òW?BC�V�E]?KJ&ò&kZð¿óBJ�?Úò�óPIDIDASV�AUóPC¶?���óPC�� ?K[B��óPV\[�? ��óPI��6CFó �ÚAD?BI�CRj��0��EWJ ��� k @óBð�h?BAUJsV ���/z � sO�>'kFEWJ�En ?BC�X� � ?KJ&E �Hj�IU[�ASV\EW[�VWO� ��� � O5?BChX8 k�?BV)�Hj�IU[�A��eIDADòWAU[�AUE]V + D�fõ�òWò�óBJ&X�ADC���[\ó ��kFEWóBJ�E�� üROh[�kFE ��J�ó��e?��hADIDAU[ �Ú[�k�?K[�� �&.�� C�XhV ?Úò�óPIDIDADV&AUóPC ADV ?K[B��óPV\[

� � k � � � k X �Kÿ h 1 ����� D ? �+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷45

Page 16: Incremental Multiset Hashes and their Application to Integrity Checking

Q6ASC�ò�E.� �&.��@ òW?BC óPC�I�� ò�ó � �hjF[\E ��óPI��6CFó �ÚAD?BI�V�A#"WE]X �Hj�IU[�ASV\EW[�VWO [�kFE òW?KJ&XhADC�?BIDAU[ �ÝóBðH[�kFE�Hj�IU[�ADV\EW[�V4 ?BC�X0��5?KJ�E + C g ÿ h f ��khADV�?BIDIUó�>4V�j�V4[\ó ?����hI��?�5E�� �Ú?cOÚ?BC�XZò�óPC�òWIDj�XFEñ[�k�?K[.}�� �(���� 0^ � �� � "�ÚóRX�jhIUó�D�f�ô'E]C�ò�EBOR[�kFEB�BJ�E]?K[\E]V�[.ò�ó � �ÚóPC X�ADTRADV�óBJ �HóBð D�?BC�X E]?Bò&k óBð�[�kFEX�A���EWJ�E]C�ò�E]V c V� ^V��� cÖO'�4�}� O�ADV�?K[B�ÚóPV\[RD&�KÿRf���k�ASV IUE]?BX�V [\ó

����� D ? GÝÿ - ? ��5EW['��� .0��E�?BC4� C�j��0��EWJ?BC�X V�j�����óPV�E�[�k�?K[ ÿ - ? � k -0/ ObóBJ@E4�Rj�AUTK?BIUE]C�[�I��BO � GH��IUó�� k f�ù'óB[�ADò�E[�k�?K[<E]?Bò&k óBð.[�k�EÛX�A���EWJ�E]C�ò�E]V�c V�'^���� c�ADV)��óPI��6CFó �ÚAD?BI�V�A#"WE]X ADC k O�k�E]C�ò�EBO�� ADV)��óPI��6CFó �ÚAD?BIV�A#"WE]X ASC k ?BC�X [�k�EWJ�E�E � ADV�[�VÂ?¶C�j��0��EWJ����Y.¶V�j�òsk [�k�?K[ �.G k�� ð¹óBJ k ID?KJ��BE�E]CFóPj��Pk5f ��k�ADV��J�ó�TBE]V

����� D ? G k � ? � D ? g k � ? �Kÿ h G k � /���� h �Kÿ h />4k�ASò&k_ADV4?K[ ��óPV\[ k -0/ ð¿óBJ k ID?KJ��BE<E]CFóPj��Pk�f;% EHò�óPC�òWIDj�X�EÂ[�k�?K[4[�kFE ��J�ó��h?��hASIDAU[�� [�k�?K[ � �&.�� C�XhV�?¶ò�óPISIDADV�AUóPC ADVÂ?K[ �ÚóPV\[ k -0/ ð¿óBJ k IS?KJ��BE�E]CFóPj��Pk�f �4k�ADV@��J�ó�TBE]V ��kFEWóBJ�E��2÷�ð¿óBJÁJs?BC�XFó ��Ú?K[\J&ASò�E]V�68�ñf�-�LB �d9z�dK���kFE�[�k�EWóBJ�E�� ?BISV\ó<kFóPISX�V�ð¹óBJ.? �hV\E]j�XFóBJs?BC�XFó ��ðo?��ÚADI��HóBð5k�?BV�kÛð¹jhC�ò�[�AUóPC�V�J&E���J�E]V\E]C�[\E]X?BV@�Ú?K[\J&ADò�E]VWf�Q6j�����óPV\EÂ[�k�?K[�?BC�?BXFTBEWJsV�?KJ��_òW?BC�ò�ó � �hjF[\E<? ò�óPIDIDADV&AUóPC >4AU[�k_? V�A��PC�A òW?BCb[8�hJ�ó��h?^ö�hADISAU[��¶óBð.V�j�òWò�E]V�VÂADCi[�kFE�òW?BV\E�>'kFEWJ�E�? �eV\E]j�XFóBJ&?BChXFó � ð¹?��ÚASI��¶óBðk�?BV&kZðoj�C�ò�[�ADóPC�V'ASV�jhV\E]X�f % Ek�?�TBE�a�j�V\[:V�kFó�>4C�[�k�?K[.?BCÛ?BXFTBEWJsV�?KJ���k�?BV:?ÁC�E��PIDA��PA��hIDE7�hJ�ó��h?��hADISAU[��ÁóBð�V�jhòWò�E]V�V�ADCÚ[�kFE4òW?BV\E�>'kFEWJ�EJ&?BC�X�ó �-k�?BV�k ðoj�C�ò�[�AUóPC�V�?KJ�E�jhV\E]X�fbô'E]C�ò�EBO6>4AU[�kÚ?HV�A��PChA òW?BC�["��J�ó��h?��eADIDAU[ �<óBð5V�jhòWò�E]V�Vk�E'ADV?��hIUE[\ó X�ADV\[�ADCD��j�ASV�k ��EW[¥>EWE]C [�kFE j�V\E óBð8�hV\E]j�XFóBJs?BC�XFó �0kh?BV�k ðoj�C�ò�[�ADóPC�VÁ?BC�X [�kFE jhV\EÛóBð�Js?BC�XFó �k�?BV�k ð¹jhC�ò�[�AUóPC�VWf ��k�ADVÂò�óPC�[\J&?BX�ADò�[�VH[�kFE XFE C�AD[�AUóPC óBð8�hV\E]j�X�óBJ&?BC�XFó �ÚC�E]V�VWO5V\EWE ø c dÂþ'ûBüKý.ð¿óBJ�?XFEW[�?BADIDE]X ��J�óRóBð°óBð�?�V�A �ÛADID?KJ@J�E]V�j�ID[Wf

� W�ê�ï1W�è°é a ë� 3 ì�ìïzéPï54 TV� íbVxéPï a�TFé��_W a��

õ+ð¹EW>�ADC�[\EWJ�E]V\[�ADC�� TK?KJ&AD?BC�[�V'óBð�.�� E � ADV\[Wf�Q6j�����óPV\Eñ[�k�?K[Y���� �� � �� � ��ó6X�j�IDó8DÜ?BC�Xi[�k�?K[[�kFE �Hj�IU[�A��eIDADòWAU[�AUE]V'óBðy ?BChX ���?KJ�E + D�f ��k�E]C òWIUE]?KJ&I��� � ��of5ô'E]C�ò�EBO�>.EÚXFó�C�óB[ÁCFEWE]X�5E�� �Ú?hO ADCi[�kFE ��J�óRóBð�óBð ��kFEWóBJ&E��0üRf ��k�ADV ��E]?BChVÂ[�k�?K[Â[�kFE ��J&ó�óBðóBð7��k�EWóBJ�E���ü XFóRE]VÁCFóB[XFE���E]C�XÝóPCÝ[�kFEiòW?KJ&X�ADCh?BIDAU[�AUE]V�óBð ?BC�X� � [\ó ��E�E4�Rj�?BIB��ó6X�j�IDó C�f�% EiòW?BC J�E��Úó�TBE [�kFEòW?KJ&X�ASC�?BIDAU[ � 0 ��N�O V�@ð¹J�ó � [�kFE<V�ò&kFE��ÚEñ?BIU[\ó��BEW[�kFEWJ]f��FóBJ4E � ?�� �hIDEBOFð¿óBJ�D E � ��óPCFE]C�[�AD?BIDI�� ID?KJ��BEBO[�kFE òW?KJ&X�ADC�?BISAU[�AUE]V`?BC�X ASC �h?KJ�[�ADòWjhID?KJÁ[�kFE �Hj�IU[�A �hIDADòWAU[�ADE]V'óBð� ?BC�X� � ?KJ�E + D�fD��khADV ��J�ó�TBE]VG.óBJ�óPISID?KJ��ZÿRf5õ�C óB[�kFEWJÂE � ?�� �hIUEÚASV{D��-ÿ ?BChX ��óB[�k ?BC�X ��$?KJ�EÚV�EW[�VWO�>4k�ADòsk ��J�ó�TBE]Vñ[�kFE[�kFE �Û?BADC J�E]V�j�ID[.óBð�ø c�d`þ�ûBü^ýxf

QRE]ò�óPChX�I��BO°AD[ñADV ��óPV�V&A��hIUE�[\óiJ�E��hID?Bò�E [�kFEÛJs?BC�XFó �0C�óPC�ò�E8��� � ?�ò�óPjhCb[\EWJ�[�k�?K[0�BEW[�V�ADC�ò�J�E�ö��E]C�[\E]X�óPCZE]?Bò&k j�V�EñóBðw.��ñOhóBJ@� � ?BC �¶óB[�kFEWJ`TK?BIDjFEÁ[�k�?K[�CFEWTBEWJ�J�E���E]?K[�V'AU[�V�E]IUð�ADC���óPI��6CFó �ÚAD?BI[�A ��EBf ��khADV@�Pj�?KJ&?BC�[\EWE]VÂ>4AU[�k ��J�ó��e?��hADIDAU[ � ÷�[�k�?K[`[�kFE �Ú?K[\J&A � � ò�óBJ&J�E]V ��óPC�X�V�[\ó¶X�A���EWJ�E]C�[7� $ j�V�oV\EWE �5E�� �Ú? ÿ sf ��khADV@J�E���ó�TBE]V'[�k�EñCFEWE]X_ð¹óBJ'?ÛJ&?BC�XFó � C�j��0��EWJ �BE]CFEWJ&?K[\óBJ`ð¹J�ó ��[�kFEHV�ò&k�E���EBfY�óBJ�EWó�TBEWJ]O�V&kFóBJ�[\EWJ�TK?BIDjFE]V.òW?BC ��E�j�V\E]XÛð¿óBJe�ñ?BV.IUóPC��<?BV[�kFE�LBE��ÛADVò&k�?BC��BE]X >4k�E]Cl�Âó�TBEWJ���ó�>4V40[�k�ADV@J&E]X�j�ò�E]V [�kFE<V�A#"WEÂóBð�[�kFEÁk�?BV�k5f

ú�ð �}� .Â[�k�E]C�[�kFE ��J&ó�óBð�óBð ��kFEWóBJ�E��-üÁXFó�E]V�CFóB[�XFE���E]C�X�óPC �Ú?K[\J&A � � ?BC�XÚAU[�V:ò�óBJ&J�E]V ��óPC�X6öADC�� � $ j�VWf�Q6A �ÛADID?KJ&I��BORAUð�V�j��ÚV@óBð�k�?BV�kFE]V]O68� � .�/K� �1ML

��NPO V�K68� ��÷�/z�� ��ó6XDw/+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷ �

Page 17: Incremental Multiset Hashes and their Application to Integrity Checking

?KJ�EHk�ADX�XFE]C ð¹J�ó � [�kFE<?BXFTBEWJsV�?KJ�� �okFEñL6CFó�>4V�>4khADò&k �<j�ID[�ADV\EW[_ ADV8��E]ADC��Úk�?BV�kFE]X�O��hjF[4CFóB['[�kFETK?BIDjFE`óBð°[�k�EÁV�j�� óBð�k�?BV�kFE]V� �[�kFE]C_>EÁòW?BC¶J&E���ó�TBE`6��0� .�/K�4 .ð¹J�ó � [�kFEÁV�òskFE���Eñ?BID[\ó��BEW[�kFEWJ]fhõ�V[�kFE�ð¹óPIDIUó�>4ADC�� ò�óBJ�óPIDIS?KJ���V&kFó�>4V]O]ò�ó � �hIUEW[\E�khADX�ADC��@ADV�CFóB[5C�E]ò�E]V�V�?KJ��Bf2% E�òW?BCñj�V�E:? �hV\E]j�XFóBJs?BC�XFó ���EWJ�HjF[�?K[�AUóPC [\ó khADXFEÂV�j��ÚV@óBð�k�?BV�k�E]VWf� %'W$%Tu&u&s+W$v ��*}C���������# ����46��� ��� � �+� ��� � ��� �[F�M(���-B���� �����4 ��/���K���d929 � ��;��/�'e/� ��HK1�

. � � � d �� `� I � � d , ��NPO ��K68� ��÷�/z� /. 0�L��N�O �� ��óRXZÿ h S /

b ���L9 ��68�_&���.�/]÷i� "r� : < < h X �/�'e;� � d ��9 ��9 �/�Te6��B��A@ ��� � � �� �qe��o9 �dB �_;���� �+e6�d9 �/�Te6��B ����B����G@� �+������� � �����4 �l�/�!� �/�Te5;;�a9oB��!1� �l�/�!�2j����+���4:J ���/� � �����l�/��9 � ����� 1� �DlK

C�������� # ����45� � ������3 4�46������� �[F�M(���-B���� ������b������K����9o9 � �l;!�/�'e/� ��HK1�

. � � � d �� ]�1� � d , L��N�O ��Q68�0��÷�/z�� ��óRXZÿ h .

b ���L9 �$6 � &���.�/]÷i��"4� : < < X j �/�'e7� � d ��9 �_9 � �'e6��B��G@$�4� � � �4 �ze �29 ��B]�y;D�����+e6��9 �/�'e6��B ����B����G@� �+������� � �����4 �l�/�!� �/�Te5;;�a9oB��!1� �l�/�!�2j�����B���� �����4:J ���/��� �����l�/��9 � ����� 1�/��lK

ù'óB[�ADò�E¶[�k�?K[�[�kFE �Hj�IU[�ADV\EW[�k�?BV�k�E]VH?KJ&E ASC�ò�J�E���E]C�[�?BI7��E]òW?BjhV\E� � d ADVH? ��EWJ�<j�[�?K[�AUóPCÜ?BC�X�OkFE]C�ò�EBOeADCbTBEWJ&[�A��hIUEBf#�9 �4� �LK)% E J&V\[ ò�óPC�V�ADX�EWJ ? J&?BC�XFó � ðoj�C�ò�[�AUóPC � � d f�Q6j�����óPV�E_[�k�?K[ [�kFEi?BX�TBEWJ&V�?KJ��ÝIDE]?KJ&C�V �[�j��hIDE]V øI $ 0n. � � � d �� $ výxf:õ�VÚADC���E�� �Ú? ÿRO�[�kFE ��J�ó��e?��hADIDAU[ � [�k�?K[�[v>.ó ��EWJ�HjF[\E]XÜV�j��ÚV�óBðk�?BV�k�E]V ADC [�kFE �9[�j��hIUE]V ?KJ�EiE4��j�?BI`ADV ?K[ ��óPV\[ � X��Kÿ h f.ú�ðÁ?BIDI4óBðñ[�kFE��#?KJ�EijhCFE4��jh?BI�[\óÜóPCFE?BCFóB[�kFEWJ@[�kFE]C �Ú?K[\JsA � � 6�� �oXFE C�E]XÛ>4AD[�kFóPjF[�[�k�E �h?KJ&[.ò�óBJ�J&E]V ��óPC�X�ADC��ñ[\óH[�k�E'J&?BChXFó � C�óPC�ò�E� ADV:jhC�AUð¹óBJ�ÚI��ñXhADV\[\J&A��ejF[\E]X�?BC�XÚCFóB[:L6CFó�>4CÚ[\óÁ[�k�E'?BXFTBEWJ&V&?KJ����oV�ADC�ò�E�� � d ADV�?ÁJ&?BC�X�ó ��ð¹jhC�ò�[�AUóPC sfô'E]C�ò�EBOb[�kFE8�hJ�ó��h?��hADISAU[��<[�k�?K[T� �� �68���I���� � �68� ��ó6X�j�IUó;D_ADV�V\[�?K[�ADV\[�ADòW?BISI��<ADChXFE���E]C�XFE]C�[$óBð[�kFEÂL6CFó�>'IUE]X��BE`óBð�[�kFEÁ?BX�TBEWJ&V�?KJ��Bf���khADV@òW?BC ��EÂj�V�E]X¶ADC�V\[\E]?BX óBð �5E�� �Ú?�üH[\ó ��J&ó�TBE ��kFEWóBJ&E��ÚVü ?BC�X ÷Kf �4k�ADV�J�E]V�j�ID[`?BISV\ó_kFóPIDX�V�ð¹óBJñ? �hV\E]jhXFóBJ&?BC�XFó � ðo?��ÚADI �_óBð ��EWJ�HjF[�?K[�AUóPChV�� � d O5V�EWEÚ[�kFEJ�E��Ú?KJ&L ?K[�[�k�EÁE]C�X¶óBð$[�kFE ��J&ó�óBð°óBð �4kFEWóBJ�E���÷ÁASC¶õB����E]C�XhA � õñf

^ �ÛêPë�ë��Áë� ^ ë(V Vvï a^ïvë�è S TDaKï a�é W�è�î�T ë��-� íbVzéPï�� Vvï¥î�W�éBï 4(T�� íbVxéPï a�TFé��_W a��

ú�C¶[�kFEÂð¹óPIDIUó�>'ADC���IUE�� �Ú?�� ��� @ADV4? ��J�ó��h?��eADIDADV\[�ASò ��óPI��6CFó �ÚAD?BI�[�A ��E �oASC¶IUó��9� @?BI��BóBJsAU[�k�� >4k�ASò&kóPjF[ �hj�[�V�>E]A �Pkb[�V��� � / � � �$/��� � <w< � - � ð¿óBJ°? ��óPI �RCFó �ÛAD?BIKC�j��0��EWJ�óBð�Js?BC�XFó � ADC��hjF[�V � � / � � �[/ �� �� ��� �V&j�ò&k�[�k�?K['÷_��� $ ��� �$ >4AD[�k ��J�ó��h?��hASIDAU[��Á?K[:IDE]?BV\[�hf % E4V&kFó�> [�kh?K[:AUðeV�jhò&k�?BCÚ?BI��BóBJsAU[�k��E � ADV\[�V�[�kFE]C >.E�òW?BC �hJ�E]?KL_[�kFE�=�� ��J�ó��eIUE�� ASC��� ��� 4ASC ��óPI��6CFó �ÚAS?BI5[�A ��EH>4AU[�k ��J�ó��e?��hADIDAU[ �?K[4IUE]?BV�[��hf���YS�SVs��T*�, ��e� ��� �7�� � ;E;�+�/�IH?��9 � ��B � �;� �P �� ���L9 �M� � ��� �c�U�D�YB 7��a9`�M���;� �7 ��6 ����9� G �oIUó��9� / j �����d��� �!� $ ! � ��� $'& � /:��� $ � < <�� - � $ & � !#� �!� � / � � �$/ �� e&

÷4� � $ � � �$ /�� $ � $ �� .�/�� $ c � $ c G �oIUó��9� / � � �0� �1Q�

! t&w�qs���R�\ØW�^qs�Pwxt@´���uxt q&� � �\qs�v�`ts{Rwx�^��~ rBts�^� � � � r]y'q.�Bts��y���tN~ ��qs�b�]�^~rB��u\�+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷]ü

Page 18: Incremental Multiset Hashes and their Application to Integrity Checking

,(�4 � 7�� �-H=� � �a9 � 1��9 � � � ��� aKyM(��� �U ���a9 ��� � ��� � �4;T9 �>7��>7 � � � � � ��;��/�G@/����B��l�/�( �&B � C1� �ÛIUó�� �$F�/�IH?��9 � �>B �-� ��� � �;� �h �� �����d�[� �l! � ��� 2/ �! � � �!�� $& �n� � � � � ��� �oIDó��9� / ����Vbb�d9fe��2j�H �&{/���_��9 �/�'e?��B ��� � ��� zj�b �i�d9 �c�>7 � �c1�5P �TeM ����e/��� �Z9 �4 � �#�qHU� �� ����� ��� b3� �-;T9 �>7��>7 � � � :@h� �� � ��� �� �oIUó�� � / K#�9 �4� �LK��5EW[7� ! � ��� sf�QRE]IDE]ò�[<?���óPI��6CFó �ÚAS?BI$CRj��0��EWJ �ÜóBð.Js?BC�XFó ��E]IDE���E]Cb[�V`� � / � � �[/K� �ADC<w<�� - � ?BC�X � �8�b÷�/ � � �[/ �c�H?BC�X¶ò�ó � �hjF[\E

���_� � � V�� ?BC�X � $ � � V �:ð¿óBJ��4�� � �G.ó � �ejF[\E���� � / � � �[/��� ;!=� �!� � / � � �[/ �� sf°Q6ASC�ò�E � � ò�óPC�V\[\J&jhò�[�AUóPC [�kFE � $ VÁk�?�TBE ��EWE]C ò&kFóPV�E]Cj�C�ADð¿óBJ�ÛI�� ?K[�J&?BC�X�ó �¶Oh>.E<L6CFó�>([�k�?K[�>4AU[�k ��J�ó��e?��hADIDAU[ � ?K[`IUE]?BV\[ � [�kFEH>E]A��Pk�[�V � � / � � �[/�����<w<�� - � ?KJ�Eñò�ó � �ejF[\E]X_V�j�òsk¶[�k�?K[�[�k�E�� ?KJ&EñCFóB[�?BIDI�E4�Rj�?BI�[\ó "WEWJ&óFOkc ��� c G �oIUó��9� / Oh?BC�X

÷N�� $ � � �$ � � � � � � V � � � � �5A Q6ASC�ò�EÂ[�kFE �ZASC��hjF[�V ?KJ�EÁASC¶J&?BC�XFó � óBJsXFEWJ]OF[�kFE �hJ�ó��h?��hADISAU[��Ú[�kh?K[����=�� .�ASV�?K[4IUE]?BV\[

÷�� � � �oIUó�� � -0/ �Q6j�����óPV�E4[�k�?K[���� �� .6f �5EW[ � ��E�[�kFE)�BJ�E]?K[\E]V\[4ò�ó � ��óPC¶X�AUT6ADV\óBJ7��EW[v>.EWE]C ���Â?BC�X � ^ ÷Kf���kFE]C��� � � ��ADV'ASCbTBEWJ�[�A �hIUE<ASC <>< � - � f�c7�Zj�V�ASC��Û[�kFEÛG@khADCFE]V\E<J�E��Ú?BADC�X�EWJ'[�kFEWóBJ&E�� �o?BV�V�j��ÚASC��Û[�k�?K[`>.EL6CFó�> [�kFE<ð¹?Bò�[\óBJ&A "]?K[�AUóPC óBð ��^Ý÷: sO�>.EH?KJ&EH?��hIDEñ[\ó¶ò�ó � �hjF[\E<[�kFE�ADCbTBEWJsV\E<óBð ����� �¶ADC <w< � - � ADC��óPI��6CFó �ÚAD?BI�[�A ��EBf�=�E]CFóB[\E<[�k�ADV ADC�TBEWJ&V\E)� � �_�� fD�FJ&ó � �5A .>.EñADCFð¹EWJ [�k�?K[

�� N� � - � d� � V � � � �ù'óB[�ADò�E�[�k�?K[`AUð � � ��� ?BChX���� ��� Oe[�k�E]C � � � ��� Oe[�k�?K[ÂADV ���y��� �ÚóRX�jhIUó ��^ ÷Kf�þ4E]òW?BIDI

[�k�?K[ ��X�AUT6ADXFE]V9�R^ ÷Kf!�FóBJ [�k�ASV�J�E]?BV�óPC � �<j�V�[@?BISV\óHXhAUTRASXFE��bfY��EW['� � � ���R^ ÷: � � ?BC�X�� � ��� � �hfc.óB[�k�òW?BC ��EÁò�ó � �hjF[\E]X_ADC ��óPI��6CFó �ÚAS?BIe[�A ��EÁ?BV >.Eñk�?]TBEHV�kFó�>4C�f�ù'ó�> � òW?BC���EÂE � ��J�E]V�V�E]X_?BVóPCFEÁóBð$[�kFEÁJ&ó�óB[�V

�=� � � d * � d />4kFEWJ&EM. G � G ��^ ÷Kf.Q6ADChò�E �_G c ��� c G �oIDó��9� / O:E]?Bò&k óBðÂ[�kFE_J&ó�óB[�V òW?BC ��E_ò&k�E]ò�LBE]X9ADC��óPI��6CFó �ÚAD?BI�[�A ��EBf��4k�ADV ��J�ó�TBE]V�[�kFEÁIDE�� �Ú?6f

��k�E4=��i?BV&V�j�� ��[�ADóPCÚV\[�?K[\E]V.[�k�?K[�ð¹óBJ@?BIDI�����[?BI��BóBJ&AU[�k��ÛV � ��� sO�?BC �ÚC�j��0��EWJ��^O�?BC�X��(ID?KJ��BEE]CFóPj��Pk5O �����d��� � � �+ADV�? ��JsA ��E@��ó�>EWJ�O � �BE]CFEWJs?K[\E]V� ���� 2/

�l! � ��� 2/ �!%� ���Y/ �� &/� � � � � G �oIUó��9� -0/ �% E<?KJ&EÂJ�E]?BX�� [\ó ��J�ó�TBE ��kFEWóBJ&E�� ÿRf� �����]���z��ts��� � ���^tswx��� � ���]���z��ts�<t����¥u����Wwx���N��ux���P��tsw�t����¥u������! f ±U�z���^���#"��^qs����t4���]����ux�z����$���%�! f �B¤���\qs�Á��tsw� ���]� � �'& � r]y(" ���)��� �! f ²¥�+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷4O

Page 19: Incremental Multiset Hashes and their Application to Integrity Checking

#�9 �4� �LKÁQ6j�����óPV�E:[�k�?K[$[�kFEWJ�E.E � ADV�[�V°?�C�j�� ��EWJ �?BC�XH?B��J&ó��h?��hADIDASV\[�ADò ��óPI��6CFó �ÚAD?BIB[�A ��E?BI��BóBJsAU[�k��� �[6 sO�>4k�ADòsk�Jsj�C�V4ASC�[�A �ÚE ��� �oIUó��9� / O�>4AU[�ki?BòWò�E]V�V`[\ó¶?ÛJ&?BChXFó � óBJs?BòWIUE 6 >4k�ADòsk_óPjF[ �ejF[�V>4AU[�k ��J�ó��h?��hASIDAU[�� � � ÷�� ��?'ò�óPIDIDADV&AUóPCr ð¿óBJw � f���k�?K[�ADV]O$ ��� � Oi#?BChX- � ?KJ�E ��óPI��6CFó �ÚAD?BIV�A#"WE]X + ��O�?BC�X

. �� w� ��NPO 6 ���� ��� �

��N�O 6 ��� � d� � . �� � ���k�ASV8��E]?BC�V [�k�?K[

÷_�� ��N�O 6 ��� ���� - � d� /

[�kFEWJ�E�ADV`?���óPI��6CFó �ÚAD?BI°C�j��0��EWJ��� j�V`?BC�X� �� j�VÂjhCFE4��jh?BI�[\ó "WEWJ�óFO�ð¹óBJÂ?BIDIw��� � [�kFE�?��hV�óPIDjF[\ETK?BIDjFE�c �� ^���� c + �_ADV"��óPI��6CFó �ÚAS?BI�V�A#"WE]X�O6?BC�X [�kFEWJ�E�E � ASV\[�V?��4�}�+V�jhò&k [�k�?K[yV� ^���� �� .6f

��EW[���E¶?BC ?BI��BóBJ&AU[�k�� [�kh?K[ �Bó�E]VÚð¿J�ó � �� ��� [\ó � : � ��� sO:>4k�EWJ�E�� : � ���

XFE]CFóB[\E]V`[�k�EHV\EW[`óBð:óBJs?BòWIUE]V`>4AU[�kiADC��hj�[�V4ADC�� ?BC�XióPjF[ �hj�[�V�ASC � ���� sf�ASV�òskFóPV\E]C V�j�òski[�k�?K[�

�!� � / � � �[/ �� J&EW[�jFJ&C�V � � >'kFE]C�AU[�ADV�òW?BIDIUE]XZð¿óBJ�[�kFE J&V\[�[�A ��E<óPCiV\ó ��E�ADC��ejF[ � � O$� X >4kFE]CZAU[ADV òW?BIDIDE]X¶ð¿óBJ4[�kFE J&V�[.[�A ��EÂóPC�V\ó �ÚEÁADC��hjF[ � X X�A���EWJ�E]C�[ ð¿J&ó ��� � O�?BC�X_V\óÚóPC5f%9kFE]C � � / � � �[/ ��i?KJ�E ò&kFóPV�E]C Js?BC�XFó �ÚI��BO � �!� � / � � �[/ �� ÁòW?BC�CFóB[ ��E X�ADV�[�ADC��Pj�ADV&kFE]Xið¿J�ó � ?

J&?BC�X�ó ��óBJ&?BòWIUE0� � � ��E]òW?BjhV\E � òW?BC�CFóB[)��jFEWJ����óBJ�E<[�k�?BC �i[�A ��E]V]f���kFEWJ�EWð¹óBJ�EBOhADð°>.EñIUEW[��

��E'[�k�E�ò�ó � ��óPV�AD[�AUóPCÛóBð � ?BC�X�O �-ASV.?��eIUE'[\ó ChX ?Hò�óPIDIDADV&AUóPCÚð¹óBJy. >4AU[�k ��J�ó��e?��hADIDAU[ � ��>4kFE]C

AU[�V ADC��hjF[�V.?KJ�EÁò&kFóPV�E]C_j�C�AUð¹óBJ�ÚI ��?K[ Js?BC�XFó �¶f�Y�óBJ�EWó�TBEWJ]O �-ADV ? ���h[.?BI��BóBJsAU[�k���V�?K[�ADV�ð �6ADC�� �1Q� sOV\ó � ���5E�� �Û? Q�O0� òW?BC ��J�E]?KL [�kFEñX�ASV�ò�J�EW[\EñIUó�� ��J�ó��hIUE�� ADC&� ��� �ADC ��óPI��6CFó �ÚAD?BI�[�A ��Eñ>4AU[�k��J�ó��e?��hADIDAU[ �Á?K[�IUE]?BV\[�� �oIUó�� �� / � �oIUó��9� - X / f ��k�ASV$ò�óPC�[\J&?BX�ASò�[�V�[�kFE�=��Z?BV&V�j�� ��[�ADóPC�fBQ6ó � XFóRE]VCFóB[�E � ADV\[WOF>'k�ADò&k �hJ�ó�TBE]V �<j�ID[�ADV\EW[�övò�óPIDIDASV�AUóPC J�E]V�ADV�[�?BC�ò�EBf

c.E]òW?Bj�V\EÂóBJs?BòWIUEÂ?BòWò�E]V�V [\ó 60ADV@V\[\J&óPC��BEWJ@[�k�?BC óBJ&?BòWIUEÂ?BòWò�E]V�V [\ó�.iO�[�khADV7��J�ó�TBE]V8�4kFEWóBJ�E�� ÿ>4kFE]C 6 ADV:?`Js?BC�XFó � óBJ&?BòWIUEBf ��kFE J�E]V�jhIU[�òW?KJ�J&AUE]V�ó�TBEWJ�[\ó ��óPI���öxJ&?BC�X�ó � ð¹j�Chò�[�AUóPC�V ��E]òW?Bj�V\E [�kFE��?KJ�EñASC�X�ADV\[�ASC��Pj�ADV�kh?��hIUE ð¹J�ó ��J&?BC�X�ó � ð¹j�Chò�[�AUóPC�V � � ���h[�?BI��BóBJ&AU[�k��ÛVWf�-�LB �d9z�dKÁQ6j�����óPV�ADC�� [�k�?K[6 ADV¶? Js?BC�XFó �#óBJ&?BòWIUE ADV_? V\[\J�óPC��Ý?BV�V�j�� ��[�AUóPC�f4G.ó � �e?KJ�E]X9[\ó[�kFE 8D:?<?>!@?A!B/CD@/EDF;G4H ?BC�X_8;:=<?>!@?I=JJ!@/EDF!G�H >E¶XFó CFóB[�CFEWE]XÜ? V\E]ò�J�EW[�LBE�� �o?BV�[�k�E V�EWE]XÜóBð'?�hV\E]jhXFóBJ&?BC�XFó � ðo?��ÚADI ��óBð k�?BV�k ðoj�C�ò�[�ADóPC�V� '?K[<?BIDIxf9% EÚJ�EWð¹EWJñ[\ó ø c@þ'û 5Bý:ð¿óBJH?_X�ADV&òWj�V�V�AUóPC ADC�[\ó>4k�?K[ E � [\E]C�[4[�kFEÁJs?BC�XFó � óBJ&?BòWIUE<?BV�V�j�� �h[�AUóPC¶òW?BC���E)��EW[4ADC �hJ&?Bò�[�ADò�EBf

� �ÛêPë�ë��Áë� ^ ë(V Vvï a^ïvë�è S TDaKï a�é W�è�î�T ë�� � ThîRéBë5ê 3 ìì�ïzéPï 4(TV� í VzéPï a�TFé��_W9ai�

ú�ð �ñADV.? �� E]X ò�óPC�V\[�?BC�[ ADC [�kFE 8D:=<6>;@6IJJ�@ E;F;G�H�OB[�kFE]C >.E�?KJ&E`?��P?BASC T6j�IDC�EWJ&?��hIUE ð¹óBJ@[�kFEÂ?K[\[�?Bò�LXFE]V�ò�JsA���E]X ð¹óBJ [�k�EK8D:=<6>;@6A!B C;@ E;F;G�H�O�>4k�EWJ�E � ADV ? �� E]X ò�óPC�V\[�?BC�[Wf ��kFE �Ú?BADC X�A���EWJ�E]C�ò�E ADV[�k�?K[�[�kFE¶?K[\[�?Bò&L ADV�CFóB[ ��óRXhj�IUóBD�� ÿ �ejF[ �ÚóRX�jhIUó D�� ÿih<f$��k�ADV ��E]?BC�V�[�k�?K[�[�k�E_IDADCFE]?KJò�ó �0�hADC�?K[�AUóPC �Û?��9IUE]?BX [\ó ? ò�óPIDIDASV�AUóPC >4AU[�k9ID?KJ��BE �Hj�IU[�A �hIDADòWAU[�ADE]VWf ��k�ASV >.óPj�IDX �PADTBE ? CFóPC6ö��óPI��6CFó �ÚAD?BI�V�A "WE]X ò�óPIDISADV�AUóPC ?BChX XFóRE]V<C�óB[<XFEWð¹E]?K[<[�k�E��Hj�IU[�ADV�EW[ñò�óPIDIDADV&AUóPC J�E]V�ASV\[�?BC�ò�EBf�ú�[ñ[�j�J&C�VóPjF[�[�k�?K[�[�k�ADV ��J&ó��hIUE�� ADVHJ�E]ID?K[\E]X [\ó ?i>E]A��Pk�[\E]XÜL6C�?��hV�?Bò&L ��J�ó��eIUE�� �oV�EWE_?BIDV\ó ø c@Yiû6Q^ý sf�ú�C[�k�ADV�V\E]C�V�E 8D:?<?>!@?IJ=J!@/EDF;G4H J�E��Ú?BADC�V@�Hj�IU[�ADV\EW['ò�óPIDIDADV�ADóPC_J�E]V�ASV\[�?BCb[WO�EWTBE]C AUð�[�kFE0�hV\E]j�XFóBJs?BC�XFó �ðo?��ÚADI�� óBð�k�?BV&k�ðoj�C�ò�[�AUóPChV{68� ASV4J�E��eID?Bò�E]X � �_? V�ADC��PIUEÁJ&?BC�X�ó � ðoj�C�ò�[�AUóPCi?]TBóPASX�ADC�� [�kFEHjhV\E<óBð?ÚV\E]ò�J&EW[�LBE��¶?BV4ADC 8D:?<?>;@/8=LD@ EDF!G�H�f

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷�Q

Page 20: Incremental Multiset Hashes and their Application to Integrity Checking

��k�E'>.E]A��Pk�[\E]X LRC�?��eV�?Bò�L � %�� �?BV&V�j�� ��[�ADóPC ADV@XFE CFE]X ?BV@ð¹óPIDIUó�>4VWf��FóBJ4?BIDI ����[@?BI��BóBJ&AD[�k��ÚV� ��� sOh?BC4�¶CRj��0��EWJ��^O ��ID?KJ�BEÂE]CFóPj��Pk�Oh?BChX � G �oIDó��9� / O�����d� � �!� $ ! <w< � $ & � /:��� $ � <>< � $'& � !%� �!� � / � � �[/ � e&. � 0 $ � $ � $ ��óRX �Y/�� $ � $ �� .�/ � $ c � $ c G �oIUó�� �� / � G �oIUó��9� -0/ �

ù'óB[�ADò�E�[�kFE�J�E]V\E��0�hID?BC�ò�E:>'AU[�k �1Q� sO�>'kFEWJ�E"�Hj�IU[�A��hISADòW?K[�AUóPC`ADC7� ���� 5ADV5CFó�> J�E��eID?Bò�E]X)� �`?BXhX�AU[�AUóPC��ó6X�j�IUó7� �¹>4kFEWJ�E �ñòW?BC ��E'?BC �ÛADC�[\E��BEWJ@?BChX XFóRE]V.CFóB[.C�EWE]XÛ[\ó ��E'?0��J&A ��E8��ó�>EWJ2 sf6ú�[�J�E��Û?BADC�Vj�C�òWIDE]?KJ:[\óñ>4kh?K[�E � [\E]Cb[.õ�a\[�?BAlj�V>óBJ�L_ø õ:a�[&û OKýeJ�E]ID?K[\E]V�[�k�ADV ��J�ó��hIUE�� [\ó<[�kFErbb�d9�� :J �������.V�k�óBJ�[\E]V\[TBE]ò�[\óBJ@��J�ó��hIUE��_fRú�[4ADV ?BC_ó���E]C���J�ó��hIUE�� >'kFEW[�kFEWJ [\ó ��E]IDADEWTBE`ASC [�kFE %��+?BV�V�j�� ��[�AUóPC�f

��EW[ 6 &�� : <w< � ��EÂ? ��óPI���öxJ&?BC�XFó � ðoj�C�ò�[�ADóPC�f�% E<XFE C�E

. �� ]�xL��NPO V�K6 ���� ��ó6X �Y/ �zû

643 [\ó ��E E4�Rj�?BI<[\ó��HO�?BChX 1430[\ó ��E ?BX�X�AU[�AUóPC ��ó6X�j�IUó � ���&�hID?:�RVZ[�kFE J�óPIUE óBð ÿih ADC8D:?<?>!@?IJ=J!@/EDF;G4H sf$��kFE���J&ó�óBð`óBð`[�kFEZC�E � [ [�kFEWóBJ�E��/ADVÛV�A �ÚADID?KJ�[\ó [�kFE ��J&ó�óBð�óBð ��kFEWóBJ�E��#ÿADC¶õ ����E]C�X�A � G�f��� �Y%pWi�YS � *�% �'e?�L9 �!�}� ����� �YBN;� �l�/� j �&.0/21 3 /26 3 ���re?�:P � �qei����C��oF�� ��B���� �����4 ��� ��� �#J���l�/�89 � ����� 1� �DlK

�FóBJ�ò�ó � �hIUEW[\E]CFE]V�V]O�>.E�ASCb[\J�ó6X�j�ò�E'?0�Hj�IU[�ADV�EW[k�?BV�k ò�óBJ�J�E]V���óPChX�ADC��Á[\ó �h?KJ&?��ÚEW[\EWJ&VeD0� ÿ/. h?BC�X ��� 0 k �oV�EWEÂQRE]ò�[�ADóPC � sf �5EW[e6%&E�,: <w< ?@ ��E�? ��óPI���öxJ&?BC�X�ó ��ð¹jhC�ò�[�AUóPC�fRù4ó�>ÁO�>.E`XFE CFE

. �� `� L��NPO V�K6 ���� ��ó6XDw/

6 3 [\ó ��EÁE4��jh?BI�[\ó��HOe?BC�X81 3 [\ó ��EñTBE]ò�[\óBJÁ?BX�X�AU[�AUóPC ��óRXhj�IUó D�f���k�EWóBJ�E�� OÛkFóPIDX�V4?��P?BADCZADð>.E ��óRXhAUð �ñ[�kFE-%�� ?BV�V�j�� ��[�AUóPC � �HJ�E��hIS?BòWADC�� � $ ! <w<�� � �7� $ ! <>< ?@ O � $ �B<w<�� � � � $ � <>< @ O?BC�X � � � D�f ��kFE8�Ú?BADC�X�A���EWJ�E]Chò�E@ASV°[�kh?K[�[�kFE � $ j�V:?KJ�E@TBE]ò�[\óBJ&V�óBð�IUE]C��B[�k � � 0 k fPõ'òWò�óBJ&XhADC��`[\óø�dÁd`ô`û OFO�QRE]ò�[�AUóPC�V�ÿRfD÷ñ?BC�X�ÿRf�ÿ�ý��POeAUð$[�kFEWJ�EñASV�? ����['V\óPIUT6ADC���[�kFE0�ÚóRX�A E]X %�� ��J�ó��hIDE�� �¹[�k�?K[ADVAU[�ò�óPC�[\J&?BX�ADò�[�V[�kFE �ÚóRX�A E]X�%�� ?BV�V�j�� ��[�AUóPC �[�kFE]C�O � �Úõ�a\[�?BAlj�V�[�kFEWóBJ�E�� ø õ�a\[&û OKýxO�[�kFEWJ�E'ASV�?��J�ó��e?��hADIDADV�[�ADò ��óPI��6CFó �ÚAS?BI��oASC#�. �?BI��BóBJ&AU[�k���>4k�ADòsk�OBð¹óBJ)�/�+@'ID?K[\[�ADò�E��ÜADC�ú þ ? O4�PAUTBE]CÛ?BC ?KJ��hAU[\J&?KJ��h?BV�ASV�óBð�4O6?�����J�ó � A �Ú?K[\E]V)�oj�� [\ó�? ��óPI��6CFó �ÚAD?BI�ð¹?Bò�[\óBJ4ASC �. :[�kFEÂIUE]C��B[�k óBð5[�kFEÂV�kFóBJ&[\E]V\[TBE]ò�[\óBJADC�4f���k�ADV ��J�ó�TBE]V ��k�EWóBJ�E�� 5Rf ��kFE >óBJsV\[�övòW?BV\E¶V�kFóBJ�[\E]V�[<TBE]ò�[\óBJ ��J&ó��hIUE��0ASV ��E]IDAUEWTBE]X [\ó ��Ek�?KJ&X5O�V\EWE ø�dÁd`ô`û OKý5ð¹óBJB��óBJ&EñX�ADV�òWjhV�V�AUóPC�f

� � êPë�ë��Áë��Áç � ��êPë 4(Thì \ �9ï¥è T ^|�bThî6ZgThê

ú�C¶[�k�ADV ?�����E]C�XhA � OR>.E ��J�ó�TBE ��kFEWóBJ�E�� �Ff

#�9 �4� �LKÁQ6j�����óPV�EH[�k�E þ4õ`Y#XFóRE]VñCFóB[0��E]k�?]TBE IDAULBEÚTK?BIDADX þ'õ�Y �oAzf�EBf°[�kFE Xh?K[�?_TK?BIDjFEÚ[�k�?K[<[�kFEò&k�E]ò�LBEWJ`J�E]?BX�V ð¹J�ó � ? �h?KJ�[�ADòWjhID?KJ�?BX�XFJ�E]V&V ADV�CFóB[�[�k�EñV�?���EñXh?K[�?�T^?BISjFEÁ[�k�?K[�[�k�Eñò&kFE]ò&LBEWJ)��óPV\[� ! t&wx�����wx�Kq�w�wx�^�~�q&wzux��µ`¤5��wx�ñ��tN���^~ ����� � �������$� �������� q&� � wx�Kq&w$wx�^�.�N����wxtsu$¤5��wx�ñ���Wwzux�����'& � �����^���\ØW�Kq&�6wxt´���uxt q&� � �^qs�D*��^����� � �\q&�`�^t&ux~Ü�BtN��y��^ts~ ��qs�b����� r�� �<�

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷YA

Page 21: Incremental Multiset Hashes and their Application to Integrity Checking

J�E]ò�E]C�[�I�� >�J�óB[\EÂ[\ó�[�k�?K[4?BXhXFJ�E]V�V� sf ��EW[ � ��E`[�kFE �Hj�IU[�ADV\EW[@óBð$[\J&A��hIDE]V>4J&AU[\[\E]C [\óÛþ4õ`Y ?BC�X¶IUEW[� ��EÂ[�kFE �Hj�IU[�ADV\EW[ óBð$[\J&A��eIUE]V@J�E]?BX¶ð¹J�ó � þ'õ�Y f;% Eñ>'ADIDI ��J�ó�TBE<[�k�?K[ � �����f

G.óPChV�ADXFEWJ [�kFEnL�>Ý?BChXI��<?> ó���EWJ&?K[�AUóPC�V [�k�?K[¶ó6òWòWjFJ óPC ?BC ?BX�XFJ&E]V�V¶?BV óRòWòWj�J�J&ADC�� óPC ?[�A ��E]ISADCFEBf��°óÛ?]TBóPADXiò�óPCFðoj�V�AUóPC_>4AU[�k¶[�kFEñT^?BIDj�E]V�óBðC@�%(BC):#$Oh>.EñE � ��J�E]V�V4[�k�ADV [�A �ÚE]IDADCFEÂADC¶[\EWJ��ÚVóBð �hJ�óRò�E]V&V\óBJÂò �RòWIUE]V]f���EW[� � ��EH[�kFE�ò �RòWIDEHóBð[�kFE J&V\[`ADC�ò�óBJ&J�E]ò�[���<?>_ó���EWJ&?K[�AUóPC�f5Q6j�����óPV\E<[�kFEò&k�E]ò�LBEWJ@J�E]?BX�V�[�kFE �h?BAUJB�(� � /�� � $ð¹J�ó �-?BX�X�J�E]V�V ( ?K[ � � fPú¥ð�[�kFEWJ�E'XFó�E]VCFóB[:E � ADV\[�?ñò �RòWIUE�?K[:>4k�ASò&k>�J&AD[\E]V@[�kFE �h?BAUJ �(� � /�� � [\óÛ?BX�XFJ&E]V�V ( O�[�kFE]C�� �����?BC�X¶>.Eñ?KJ�E<XFóPCFEBf

Q6j�����óPV\E�[�kFEWJ�E`ADV.?<ò �6òWIUE � X >4kFE]C �(� � /�� � �ADV J&V\[�>4J&AU[\[\E]C [\óH?BX�X�J�E]V�V ( f6c.E]òW?Bj�V\E`óBð�IDADC�E)5ADCÝ[�kFEn��<?> ó���EWJs?K[�AUóPC�O�[�k�EZTK?BIDjFE]VÛóBðÁ[�A ��EiV\[�?�� �hV óBðÁ?BIDI'óBðÂ[�kFEi>�J&AU[\E]V [\ó ( ?Kð¿[\EWJ � � ?KJ�EV\[\J&ASò�[�I�� �BJ&E]?K[\EWJH[�kh?BC�� � f�c.E]òW?Bj�V\E [�kFEÛ[�A �ÚEÛV\[�?�� �hV<?K[ � � ?BC�X�� X ?KJ�E [�kFE V�?��ÚEBO°?BC�X V�ADC�ò�EL�>Zó���EWJs?K[�AUóPC�VÁ?BC�X ��<?>�ó���EWJ&?K[�AUóPC�VÂX�ó_CFóB[Áó6òWòWjFJÁóPC [�kFEÛV&?���EÚò �RòWIDEBO � X ó6òWòWjFJ&V)��EWð¹óBJ�E � ��!� X + � � sf �5EW[� ��E<[�k�E�ò �6òWIUE�óBð�[�k�E JsV\['J&E]?BX ð¿J�ó � ( ?Kð¹[\EWJ(� X f�ù'óB[�ADò�E�[�k�?K[�� � ADV`? J�E]?BX?Kð¹[\EWJ�� X OeV\ó � � � � �feú¥ð"� � >EWJ�EñE4��j�?BI�[\ó � �Oh[�kFE]C_[�kFEHX�?K[�?�TK?BIDjFE �ÚóPV\[4J�E]ò�E]C�[�I�� >�J&AD[\[\E]C¶[\ó( O°Azf�EBf8� � O°>óPjhIDX ��EÚJ�E]?BX ?K[7� � f ��k�ASVÁò�óPCb[\Js?BX�ADò�[�VH[�kFE ?BV&V�j�� ��[�ADóPC [�k�?K[ � � ADV<?BC ADChò�óBJ�J�E]ò�[J�E]?BX�f ��kFEWJ�EWð¹óBJ�EBO � � � � ^fc.E]òW?Bj�V\E�[�kFE'J�E]?BX ?K[.ò �RòWIDE�� � ADV:[�k�E J&V�[�ADC�ò�óBJ�J&E]ò�[:J�E]?BX�O�[�kFE4J�E]?BX ?K[ò �6òWIUE � �ASV�?ñò�óBJ&J�E]ò�[J�E]?BX�f�QRói[�kFE J�E]?BX ?K[+� J�E]?BX�VH[�kFE V�?���E �h?BAUJH[�k�?K[�>@?BV�>�J&AU[\[\E]CÜ?K[+� X f�õB�P?BASC�O ��E]òW?Bj�V�E óBðIDADC�E�5 ADCi[�kFE���<6>�ó���EWJs?K[�AUóPC�O�[�kFE�TK?BIDjFE]V`óBð�[�A ��E�V\[�?�� �hV`óBð@?BIDI$[�kFE�>�J&AU[\E]V`[\ó ( ?Kð¿[\EWJ � �?KJ�EV\[\J&ASò�[�I����BJ�E]?K[\EWJ<[�k�?BCL� � f ��k�EWJ�EWð¿óBJ&EBO$�(� � /�� � �òW?BC�CFóB[)��EH>�J&AU[\[\E]C ?Kð¹[\EWJ(� ^f5c.E]òW?Bj�V\E � X ADV`[�kFE J&V�[�ò �6òWIUEHóPC >4k�ADòsk �(� � /�� � 'ADV'>�J&AD[\[\E]CZ[\ó ( O �(� � /�� � 'òW?BC�CFóB[ ��Eñ>�J&AD[\[\E]C ��EWð¹óBJ�E � X f�cE]òW?BjhV\E� `ADV.[�kFE J&V\[@J�E]?BX ð¹J�ó � ( ?Kð¹[\EWJ�� X O�?BChX [v>.óÚ>�J&AU[\E]V.[\óÚ?BC_?BXhXFJ�E]V�V@?BIU>@?��6V�k�?�TBEñ?�J�E]?BX ð¹J�ó �[�k�?K[�?BX�XFJ�E]V�V ��EW[¥>EWE]CZ[�kFE��¶O �(� � /�� � òW?BChCFóB[B��EÁ>�JsAU[\[\E]C ��EW[v>.EWE]C�� X ?BC�X � Kf���kFEWJ&EWð¿óBJ�EBOe[�kFE�h?BAUJ �(� � /�� � .ADV >�JsAU[\[\E]C óPC�I�� óPC�ò�EBO��hj�[�AU[�ADV@J�E]?BX_?K[ � � ?BC�X � ^f���kFEWJ�EWð¹óBJ�EBO � �����f

S T�� T�ê6Thèî�TDa

� �hÀ¿w������ l<� �hÀ¿wvqs�U���$���^��uvq�wx���^�Á�Kq�u � �����owvqs�������@t&{°��q�wzwx�����'��uxtNr^����~ ���Ám¿��¼oº\¸v®v®��s«|»� s¬�º���ª���®����Nª�����»�»^¨�½N©��� §���ºs¬x«­¨]§ ºs»�� �^®zºs¼ � º��"!hºs§��K¨]ªU«­»� $#%�&!('Â� ] ���$���� ) **�,+-� ] �Ál`q&�]�^��� ) ����~`� £ �������Öq&~ �B��*h�sqs������%6��wx��u.�$��~ ~ �����U����q&~ �Kq�wx�"/:qs���Kqs�b�]qs� � l�tN�^� ! qst&u\�F}������v�������wx�^����t&uzux����wx�^���z�°t&{�~ ��~ tsux�������em¹�10�2*2-2 ��� §���ºs¬x«­¨]§ ºs»43Rºs¨]»5�N½sªU«Dºs»�¬�º��6!hº&§��K¨]ª¿®¥¼ � ¸�«S®¥»K¸¥®¥�^�Kq&�N���� \87����]� ] �$� ] �� ) �,�9��(�� l<� ) �����Öq�ux�N�6Ð� �$tN� � ux�����v���Rqs� � �B� �$tN� � ¤�qs�z�z��u\�.m¹�^�¥ux��~ ���Wwvqs�6�¥uzy���wxtN�&uvqs�^�WyP¦bn��^��\qs�z� t&{��^qs�z�^�����qs� � �z���s�^���^����m¹�:2-;sª¿®¥»5��®<�½�=�¬vªU¼o½�¸�ª�«­»>�?�$@&½s»K¸¥®¥¬�«­»!F¼ � �KªSºN©�º< � ·&!F¼ � �KªSº1ACB1�¼zº\¸v®x®��s«­»� s¬<#*D6®z¸�ªU¨]¼x®E:ºsª¿®¥¬�«|»F!hºs§��K¨]ª¿®¥¼ � ¸�«S®¥»B¸v®:G�ºN©IHJ�LK�A�#,M%HON®¥¬x§�®��sª5®<��# � �K¼¥«|»� W®¥¼¥·�G^®¥¼¥©�½P s� ] �$��(��� ) �$ÑQ�LR8� l<� ) ������q&ux�N��Ñ����$�^��ux������q&� � %6�WÑ°ts��q�¤�q�yW�RÏ$Ð$Ѷl �°}���¦ ! ��¤¶~ ��wx��t � �h{­tsu�~ ���z�xqs�s��qs��wx�^���Wwx���\q&wx��ts��^�z���^�@³^�^��wx�:�^�z��� � tsuvq&� � tN~ {­�^����wx��tN�����°m¿�S!(T,MO,�VUXW ALYs�B�NtN���^~ �Z�$� t ts{[DJE\! � �b�]��ux���^�s��uzÓ # �¥ux�Öq&���] ����R]�� ) l4�L]P� l<� ) ������q&ux�Âq&� � �.�el���������qs������t�� � �^�¥¤ �Kq�uvq � ���s~({­t&u���tN�������z��tN��ÓD{Öux���Â�Kq&�z�^���^��¦�m¹�^�¥ux��~ ���Wwvqs����w¹y�q&wux� � ����� � ��tN�ow\��m¿��2-;sª¿®¥»5��®<�ñ½L=�¬xªU¼z½N¸�ª�^e½s¬�«­»:�?�$@&½s»B¸v®¥¬@«|»_!F¼ � �KªSºs©�º< � ·?2�¨]¼zº\¸�¼ � �^ª,A�`"�¼zº\¸v®x®��s«­»� s¬<#D6®z¸�ªU¨�¼z®,E�ºsª¿®¥¬�«­»F!hºs§Q�K¨]ª¿®¥¼ � ¸�«S®¥»B¸v®1G^ºs©IH-a8��KLK�#&b1Hc3b¨]§ � ®<��# � �K¼v«­»� W®¥¼¥·�G^®¥¼¥©�½P s� ] �$�L]W�� ) ÑQ� t � l<� ) ������q&ux��qs� � %F�PÑ�tN�Nq�¤�q�yW�:Ñ$q&� � tN~Ýtsuvqs�������q�ux�.��uvqs��wx���\q&�D¦ � �Kq�uvq � ���s~ {­t&u � ���z���s�^���^�'��¾ �������Ww��uxtswxtW��tN������m¿�F�¼zº\¸v®x®��s«­»� s¬4ºd� ª���®\3e«­¼v¬xª?��»�»^¨�½N©Q!hº&»P�\®¥¼z®¥»B¸v®'ºs»e!hºs§Q�K¨]ª¿®¥¼4½s»5��!hºs§§.¨]»^«U¸v½&ªU«Dºs»^¬� ®z¸�¨]¼¥«­ª � � ] ��� t �� }.����+5\ H ���$¤�qs���^��}��Öq�ux���N� ) ��qs���z�f��q&�z�z��� � �L��* � ¤�q&u � ���^�b�&l`q&uzwx����sqs� ��� Ào�B�&qs� � �Wux���^���Nq&�������sq � qs����аÞ@��������Wwx���&ux��w¹y�¥�����¥�]���^�°ts{P���]wzux���owx� � �owxt&uvqs�s�N�Bm¹���P®z¸��]»^«D¸x½N©�T�®g��ºs¼vª '40$�F·�D?! � ·h� T$·i�j`�a&� ! t�����~rB��u H \x\ H �� �,��'9�$���ÜÐ�k�$ts� � ux�����¥�b���B�k�$ts� � ¤�q&�z�z��u\�hqs� � �P� '�q&�������U�`}�tN�������z��ts��ÓD{|ux�����Kq&�z�^���^�'{|uxtN~ ��q&wzwx��������uxtNr^����~ ���'m¹�� �^®zºs¼ � ºd�6!F¼ � �^ªSº< s¼z½h�l� � DF«m=x½s¼ �1n �]ªUªo�cp qLq^ª��^®zºs¼ � HÖ©�¸�¬rH�§.«­ªgH|®<�&¨$q.sSªS¸�¼ � �KªSºN© t4A�us·dv�As�5ws�^��y ] ���$���� �,��l4x��8� Ð�j�$tN� � ux�����v�����B�l�$tN� � ¤�qs�z�z��u\��q&� � �P��l����\q&���D� '$t\¤ wxt���tN���owzux�^��weuvqs� � tN~ {­���^��wx��ts�^���*y]ºs¨]¼¥»K½N©bº��°ª��^®�&!('Á� t t ±�(�²¥¦ H1] \P7 H ] ]]� ] ��x��]�

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÷]û

Page 22: Incremental Multiset Hashes and their Application to Integrity Checking

� p�n5l + \ \8� ��q��]� � pb���N� }��^qs� � uvqs~ ts�Kq&�Ün��^�����sq&wx�b�l`q&ux� l���wx�¥�������D�7%Fq&wzux���v� pb���^��ts���b� ��qs� ) tN�^�����\wNtN���l���wx�v�^�����U��qs� � l`q&ux� '$t&uxt�¤5��wx´N���5ux�¥����wx����wx��uvq&�$�]�^���Btsuzw {­t&uÂ}�ts�Wy q&� � n6qs~ �B��u�Ñ����z���owvqs�Ww���t&{|wzÓ¤�q&ux�s�Zm¿� �¼zº\¸v®x®��s«­»� s¬ñºd��ª��^®�� ��� 0v»�ª8W ©,!hºs»P��®¥¼x®¥»B¸v®ñºs»_��¼z¸��]«|ª¿®x¸�ªU¨]¼o½N© � ¨8�L��º&¼¥ªV��ºs¼ �¼zº< s¼o½s§.§«­»� DR½s»� s¨�½P W®¥¬�½&»5�1UJ��®¥¼z½sªU«|»� �l� ¬xª¿®¥§.¬ n � � -D?U � · 0��.t\�K�^qs�N��� ] ���87 ] ]$]]� ! t&�N��~.rB��u H \ \x\��� ! mo�l�LRP� ! mz��n$� �6m %e� %�¯ ) ] x \&Ó ] ¦P��������ux� '$qs�z�Á�Wwvqs� � q&u � ���°��ux��� ] �$�LR]�� !�! � \�� w�� ! q&tsu5q&� � l<� ! qstsu\�R�]~�qs����Ó¿r���qs����uxtNr^qsr^������w¹y �z�^qs������¦]��¾ �������Ww���tN�^�owzux����wx��tN����qs� � qs�^��������q&wx��tN�����6m¹��L��»5�\�&!(' ��� §���ºs¬x«­¨]§ ºs»� �^®zºs¼ � º�� !hºs§��K¨]ªU«­»� s�^�^qs�s��� H ] t 7 H H t � ] ���x\��� Ñ°���j� H � Ñ��bÑ����N���ow\� Ñ&�6} ] t H1] ¦Fn��^�4l �,R`l����z�xqs�s��Ó �����N���ow��°���stsux��wx�^~`� �°��ux��� ] ��� H ���]wvq&wx����¦bm ! �RÐ$Ñ�l �5Ón�mzÐ ! �°ph�

� �^}.� + \ t �>���* � ¤�q�u � �]�^��� �°¤�qs�����5}���q&ux���N� ) ��qs���z�f��q&�z�z��� � �Wl`q�uzwx���.�sqs� ��� Ào�B�sqs� � �Wux�������Nq&������sq � q&���1S�Q���McUs¦��ux�v�^��wx����wx��ux�h{|tsu6wvq&~ �B��uzÓS���]� � ���Ww6q&� � wvqs~ �B��uzÓDux���z���owvq&�]wR��uxtW�����z�z�������]m¿�"�¼zº\¸v®x®��s«­»� s¬�º���ª��^® ] ] ��� 0v»�ª8W ©!hºs»P�\®¥¼z®¥»B¸v®.ºs» � ¨8��®¥¼z¸xºs§��^¨�ªU«|»� s�OwN���^� H \ \ t �

+),.-0/21234/�525�1768/:9�;<9= >@? �BADC ÿ/.