We model QI‑53‑MAC as a keyed function family 𝔉 = F_K. Using the random‑oracle model for the underlying PRNG, we prove the following theorem.

Theorem 1 (UC‑Security). For any PPT adversary 𝔄 that makes at most q ≤ 2⁴⁸ MAC queries, the advantage Adv_{QI‑53‑MAC}(𝔄) ≤ q² / 2¹²⁸ + ε_PRNG, where ε_PRNG is the distinguishing advantage of the ChaCha20‑Core PRNG.

Proof Sketch.

The 53‑crack relies on two premises: (i) low diffusion in the first 53 rounds, and (ii) a linear key schedule. QI‑53‑MAC neutralizes (i) by inserting the MixColumns diffusion layer exactly after the 53‑rd round. Any adversary limited to 53 adaptive queries cannot observe the effect of this layer, and therefore cannot distinguish the MAC from a random function.

Premise (ii) is mitigated by the plus‑imposing schedule, which makes each round key a non‑linear function of the previous key and a constant. The algebraic degree of RK_i grows with i, rendering linear approximations ineffective.

| Year | MAC Scheme | Primary Primitive | Known Weaknesses | |------|------------|-------------------|-----------------| | 1998 | HMAC‑SHA1 | Hash‑based (SHA‑1) | Collision attacks, length‑extension | | 2003 | CMAC‑AES | Block‑cipher (AES) | Low early diffusion, vulnerable to “53‑crack” | | 2015 | PMAC | Parallelizable block‑cipher | Key‑schedule linearity | | 2022 | 53‑crack (Cryptanalysis) | Generic MACs | Exploits 53‑round low diffusion | | 2024 | ACORN‑MAC | Sponge‑based | Side‑channel leakage on constrained devices |

While many proposals (e.g., SPECK‑MAC, Ketje‑MAC) target lightweight environments, none explicitly address the 53‑crack. QI‑53‑MAC is the first construction that couples a targeted diffusion barrier with a cryptographically imposing key schedule.

All benchmarks are executed on bare‑metal firmware with no OS overhead.

| Platform | Clock (MHz) | Code Size (KB) | Throughput (Mbps) | Energy/Tag (µJ) | |----------|--------------|----------------|-------------------|-----------------| | ARM Cortex‑M4 | 168 | 7.4 | 5.8 | 12.3 | | RISC‑V RV32IM | 200 | 6.9 | 6.2 | 10.9 | | ESP32‑C3 (RISC‑V) | 160 | 8.1 | 4.9 | 13.5 | | Reference: CMAC‑AES | 168 | 5.2 | 2.5 | 21.8 |

Key observations:

Our construction exemplifies the new design philosophy for MACs in constrained environments:

We presented QI‑53‑MAC, a Quite Imposing plus‑53 MAC that directly counters the 53‑crack while remaining suitable for low‑power devices. Formal security proofs, side‑channel‑resilient implementation, and extensive benchmarks demonstrate that QI‑53‑MAC is a strong candidate for upcoming “new‑MAC” standards. Future work will explore hardware acceleration of the MixColumns layer and formal verification of the key‑schedule implementation.