Misuse-resistant MGM2 mode

Liliya Akhmetzyanova; Evgeny Alekseev; Alexandra Babueva; Andrey Bozhko; Stanislav Smyshlyaev

Paper 2022/1590 Original: eprint.iacr.org/2022/1590 ↗

Misuse-resistant MGM2 mode

Liliya Akhmetzyanova

Evgeny Alekseev

Alexandra Babueva

Andrey Bozhko

Stanislav Smyshlyaev

Abstract

We introduce a modification of the Russian standardized AEAD MGM mode — an MGM2 mode, for which a nonce is not encrypted anymore before using it as an initial counter value. For the new mode we provide security bounds regarding security notions in the nonce-misuse setting (MRAE-integrity and CPA-resilience). The obtained bounds are even better than the bounds obtained for the original MGM mode regarding standard security notions.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint.
History: 2022-11-15: last updated; 2022-11-15: published
Short URL: https://ia.cr/2022/1590
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2022/1590,
      author = {Liliya Akhmetzyanova and Evgeny Alekseev and Alexandra Babueva and Andrey Bozhko and Stanislav Smyshlyaev},
      title = {Misuse-resistant MGM2 mode},
      howpublished = {Cryptology {ePrint} Archive, Paper 2022/1590},
      year = {2022},
      url = {https://eprint.iacr.org/2022/1590}
}