Paper 2000/039 Original: eprint.iacr.org/2000/039 ↗

Encryption Modes with Almost Free Message Integrity

Charanjit S. Jutla
Abstract

We define a new mode of operation for block ciphers which in addition to providing confidentiality also ensures message integrity. In contrast, previously for message integrity a separate pass was required to compute a cryptographic message authentication code (MAC). The new mode of operation, called Integrity Aware Parallelizable Mode (IAPM), requires a total of m+1 block cipher evaluations on a plain-text of length m blocks. For comparison, the well known CBC (cipher block chaining) encryption mode requires m block cipher evaluations, and the second pass of computing the CBC-MAC essentially requires additional m+1 block cipher evaluations. As the name suggests, the new mode is also highly parallelizable.

Metadata
Available format(s)
PDF
Category
Secret-key cryptography
Publication info
Preprint.
History
2018-04-08: last updated
2000-08-01: published
Short URL
https://ia.cr/2000/039
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2000/039,
      author = {Charanjit S.  Jutla},
      title = {Encryption Modes with Almost Free Message Integrity},
      howpublished = {Cryptology {ePrint} Archive, Paper 2000/039},
      year = {2000},
      url = {https://eprint.iacr.org/2000/039}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.