This helps protect our community. Learn more

Release of Unverified Plaintext: Tight Unified Model and Application to ANYDAE

9.87K subscribers

101 views 4 years ago

Paper by Donghoon Chang, Nilanjan Datta, Avijit Dutta, Bart Mennink, Mridul Nandi, Somitra Sanadhya, Ferdinand Sibleyras presented at FSE 2020 See https://iacr.org/cryptodb/data/paper..... The conference program is at https://fse.iacr.org/2020/program.php

...more

License

Creative Commons Attribution license (reuse allowed)

These chapters are auto-generated

Release of Unverified Plaintext: Tight Unified Model and Application to ANYDAE

N/ALikes

101Views

2020Nov 5

Transcript

Follow along using the transcript.

IACR

9.87K subscribers

Release of Unverified Plaintext: Tight Unified Model and Application to ANYDAE

License

Chapters View all

Intro

Intro

Intro

Outline of the Talk

Outline of the Talk

Outline of the Talk

Goal of Symmetric Cryptography

Goal of Symmetric Cryptography

Goal of Symmetric Cryptography

Stateful Authenticated Encryption (AE)

Stateful Authenticated Encryption (AE)

Stateful Authenticated Encryption (AE)

Stateless Authenticated Encryption (AE)

Stateless Authenticated Encryption (AE)

Stateless Authenticated Encryption (AE)

Security of AE

Security of AE

Security of AE

RUP Security Model

RUP Security Model

RUP Security Model

Different Variants of RUP Security

Different Variants of RUP Security

Different Variants of RUP Security

IACR

License

Release of Unverified Plaintext: Tight Unified Model and Application to ANYDAE

Chapters

Intro

Intro

Intro

Outline of the Talk

Outline of the Talk

Outline of the Talk

Goal of Symmetric Cryptography

Goal of Symmetric Cryptography

Goal of Symmetric Cryptography

Stateful Authenticated Encryption (AE)

Stateful Authenticated Encryption (AE)

Stateful Authenticated Encryption (AE)

Stateless Authenticated Encryption (AE)

Stateless Authenticated Encryption (AE)

Stateless Authenticated Encryption (AE)

Security of AE

Security of AE

Security of AE

RUP Security Model

RUP Security Model

RUP Security Model

Different Variants of RUP Security

Different Variants of RUP Security

Different Variants of RUP Security

AERUP Security Notion

AERUP Security Notion

AERUP Security Notion

SUNDAE is not RUP Secure: INT-RUP Insecurity

SUNDAE is not RUP Secure: INT-RUP Insecurity

SUNDAE is not RUP Secure: INT-RUP Insecurity

Remedy for INT-RUP Attack: MONDAE

Remedy for INT-RUP Attack: MONDAE

Remedy for INT-RUP Attack: MONDAE

Security of ANYDAE Fi is the set of first block outputs of Fmt function.

Security of ANYDAE Fi is the set of first block outputs of Fmt function.

Security of ANYDAE Fi is the set of first block outputs of Fmt function.

MONDAE and TUESDAE: Instantiations of ANYDAE

MONDAE and TUESDAE: Instantiations of ANYDAE

MONDAE and TUESDAE: Instantiations of ANYDAE

Description

Chapters View all

IACR

Transcript

On the Security of Sponge-type Authenticated Encryption Modes

Chapters

Chapters