A Critique of CCM

P.  Rogaway; D.  Wagner

Paper 2003/070 Original: eprint.iacr.org/2003/070 ↗

A Critique of CCM

P. Rogaway

D. Wagner

Abstract

CCM is a conventional authenticated-encryption scheme obtained from a 128-bit block cipher. The mechanism has been adopted as the mandatory encryption algorithm in an IEEE 802.11 draft standard [15], and its use has been proposed more broadly [16,17]. In this note we point out a number of limitations of CCM. A related note provides an alternative to CCM [5].

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint.
History: 2003-04-15: last updated; 2003-04-15: published
Short URL: https://ia.cr/2003/070
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2003/070,
      author = {P.  Rogaway and D.  Wagner},
      title = {A Critique of CCM},
      howpublished = {Cryptology {ePrint} Archive, Paper 2003/070},
      year = {2003},
      url = {https://eprint.iacr.org/2003/070}
}