This helps protect our community. Learn more

Fast Decryption: a New Feature of Misuse-Resistant AE

9.87K subscribers

111 views 4 years ago

Paper by Kazuhiko Minematsu presented at FSE 2020 See https://iacr.org/cryptodb/data/paper..... The conference program is at https://fse.iacr.org/2020/program.php

...more

License

Creative Commons Attribution license (reuse allowed)

These chapters are auto-generated

Introduction

0:00

Problem of Nonce Misuse Nonce must be unique for each encryption • When repeated, devastating attacks can happen

1:28

Fast Decryption: a New Feature of Misuse-Resistant AE

N/ALikes

111Views

2020Nov 5

Paper by Kazuhiko Minematsu presented at FSE 2020 See https://iacr.org/cryptodb/data/paper..... The conference program is at https://fse.iacr.org/2020/program.php

Transcript

Follow along using the transcript.

IACR

9.87K subscribers

Fast Decryption: a New Feature of Misuse-Resistant AE

License

Chapters View all

Introduction

Introduction

Introduction

Problem of Nonce Misuse Nonce must be unique for each encryption • When repeated, devastating attacks can happen

Problem of Nonce Misuse Nonce must be unique for each encryption • When repeated, devastating attacks can happen

Problem of Nonce Misuse Nonce must be unique for each encryption • When repeated, devastating attacks can happen

Properties of SIV

Properties of SIV

Properties of SIV

Our Contributions

Our Contributions

Our Contributions

Strawman 1

Strawman 1

Strawman 1

Drawback of DFV1 But A is twice processed at encryption

Drawback of DFV1 But A is twice processed at encryption

Drawback of DFV1 But A is twice processed at encryption

DFV2: based on Ciphertext Translation

DFV2: based on Ciphertext Translation

DFV2: based on Ciphertext Translation

DFV3: based on (generalized) Nonce Stealing

DFV3: based on (generalized) Nonce Stealing

DFV3: based on (generalized) Nonce Stealing

IACR

License

Fast Decryption: a New Feature of Misuse-Resistant AE

Chapters

Introduction

Introduction

Introduction

Problem of Nonce Misuse Nonce must be unique for each encryption • When repeated, devastating attacks can happen

Problem of Nonce Misuse Nonce must be unique for each encryption • When repeated, devastating attacks can happen

Problem of Nonce Misuse Nonce must be unique for each encryption • When repeated, devastating attacks can happen

Properties of SIV

Properties of SIV

Properties of SIV

Our Contributions

Our Contributions

Our Contributions

Strawman 1

Strawman 1

Strawman 1

Drawback of DFV1 But A is twice processed at encryption

Drawback of DFV1 But A is twice processed at encryption

Drawback of DFV1 But A is twice processed at encryption

DFV2: based on Ciphertext Translation

DFV2: based on Ciphertext Translation

DFV2: based on Ciphertext Translation

DFV3: based on (generalized) Nonce Stealing

DFV3: based on (generalized) Nonce Stealing

DFV3: based on (generalized) Nonce Stealing

Security Bounds

Security Bounds

Security Bounds

Security of OCB-DFV

Security of OCB-DFV

Security of OCB-DFV

BBB security by TBCs

BBB security by TBCs

BBB security by TBCs

Comparison of MRAES

Comparison of MRAES

Comparison of MRAES

Conclusion

Conclusion

Conclusion

Description

Chapters View all

IACR

Transcript

Release of Unverified Plaintext: Tight Unified Model and Application to ANYDAE

Chapters

Chapters