Paper 2016/1174 Original: eprint.iacr.org/2016/1174 ↗
Revisiting Full-PRF-Secure PMAC and Using It for Beyond-Birthday Authenticated Encryption
Abstract
This paper proposes an authenticated encryption scheme, called SIVx, that preserves BBB security also in the case of unlimited nonce reuses. For this purpose, we propose a single-key BBB-secure message authentication code with 2n-bit outputs, called PMAC2x, based on a tweakable block cipher. PMAC2x is motivated by PMAC_TBC1k by Naito; we revisit its security proof and point out an invalid assumption. As a remedy, we provide an alternative proof for our construction, and derive a corrected bound for PMAC_TBC1k.
Metadata
- Available format(s)
PDF- Category
- Secret-key cryptography
- Publication info
- Preprint.
- History
- 2017-06-21: last updated
- 2016-12-28: published
- Short URL
- https://ia.cr/2016/1174
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2016/1174,
author = {Eik List and Mridul Nandi},
title = {Revisiting Full-PRF-Secure PMAC and Using It for Beyond-Birthday Authenticated Encryption},
howpublished = {Cryptology {ePrint} Archive, Paper 2016/1174},
year = {2016},
url = {https://eprint.iacr.org/2016/1174}
}