Authenticated Encryption

• One-pass
  • Papers
    • Efficient Error-Propagating Block Chaining (André Zúquete and Paulo Guedes, CCC 1997)
    • Encryption Modes with Almost Free Message Integrity (Charanjit S. Jutla, 2000, preprint)
    • Fast Encryption and Authentication: XCBC Encryption and XECB Authentication Modes (Gligor, Donescu, 2000)
    • An observation regarding Jutla's modes of operation (Shai Halevi, eprint 2001/015)
    • A Note on NSA's Dual Counter Mode of Encryption (Pompiliu Donescu, Virgil D. Gligor, and David Wagner, 2001)
    • OCB []
      • OCB - An Authenticated-Encryption Mode
        (Phillip Rogaway (web homepage))
      • Papers
        • OCB Mode: Parallelizable Authenticated Encryption
          (Phillip Rogaway, 2000 (preliminary version of this mode))
        • OCB: A Block-Cipher Mode of Operation for Efficient Authenticated Encryption
          (Phillip Rogaway, Mihir Bellare, John Black, and Ted Krovetz, ACM CCS 2001)
        • The Associated-Data Problem (How to cheaply authenticate unencrypted data when using an authenticated-encryption scheme)
          (Phillip Rogaway, 2001)
      • Standards and standard drafts
        • OCB 2.0 internet draft
          (13.04.05)
  • Tight Lower Bound on Linear Authenticated Encryption (Charanjit S. Jutla, eprint 2002/132)
  • CWC
    • The CWC Authenticated Encryption (Associated Data) Mode (Kohno, Viega, Whiting, 2003)
    • CWC - A Carter-Wegman and Counter-Based Dual-Use Mode
• Two-pass
  • CCM
    • Submission to NIST: Counter with CBC-MAC (CCM) (Doug Whiting, Russ Housley, Niels Ferguson)
    • Security proof
    • Using AES CCM Mode With IPsec ESP (IETF draft-ietf-ipsec-ciph-aes-ccm-02.txt)
  • EAX
    • The EAX Mode of Operation (A Two-Pass Authenticated Encryption Scheme Optimized for Simplicity and Efficiency) (Mihir Bellare, Phillip Rogaway, and David Wagner, FSE 2004)
  • CWC
    • CWC: A high-performance conventional authenticated encryption mode (T Kohno, J Viega, D Whiting, FSE 2004)
  • GCSM
    • Flexible and Efficient Message Authentication in Hardware and Software (D McGrew, J Viega, 2004)
    • The Galois/Counter Mode of Operation (GCM) (David A. McGrew, John Viega, 2004)
  • [scholar]Two-Pass Authenticated Encryption Faster than Generic Composition (Stefan Lucks, FSE 2005)
• @Block cipher modes
• @Message Authentication Codes
• @The story of authenticated encryption (Material for Rogaway's presentation in 2001 Estonian Winter school)
• General composition results
  • Authenticated Encryption: Relations among notions and analysis of the generic composition paradigm (M. Bellare and C. Namprempre, Asiacrypt 2000)
  • [scholar]The Order of Encryption and Authentication for Protecting Communications (or ( How Secure Is SSL?))
  • Does encryption with redundancy provide authenticity? (J. An and M. Bellare, Eurocrypt 2001)
  • Provably Fixing the SSH Binary Packet Protocol (M. Bellare, T. Kohno and C. Namprempre)

---

Cryptology Pointers by Helger Lipmaa
Got any suggestions or additional links? Mail to <helger.lipmaa>gmail.com
NB! If you find any broken links, please be kind and report them to me together with their current location!

(C) Helger Lipmaa 1997-2009.