Paper 2003/154

ManTiCore: Encryption with Joint Cipher-State Authentication

Cheryl Beaver, Timothy Draelos, Richard Schroeppel, and Mark Torgerson

Abstract

We describe a new method for authenticated encryption, which uses information from the internal state of the cipher to provide the authentication. This methodology has a number of benefits. The encryption has properties similar to CBC mode, yet the encipherment and authentication mechanisms can be parallelized and/or pipelined. The authentication overhead is minimal, so the computational cost of the authenticated encryption is very nearly that of the encryption process. Also, the authentication process remains resistant against some IV reuse. We present a class of encryption algorithms that are based on cryptographic hash functions. Because of the hash function construction, the MTC4 class of methods supports variable encryption block sizes up to twice the hash output block length and trivially supports variable key lengths. We also provide a more general construction for using the internal state of any round-based block cipher as an authenticator. We give a concrete example of the general construction that uses AES as the encryption primitive. We provide performance measurements for all of our constructions.

Metadata
Available format(s)
PS
Category
Secret-key cryptography
Publication info
Published elsewhere. Unknown where it was published
Keywords
Authenticated EncryptionLuby-RackoffFeistelMiddletextHashCipher
Contact author(s)
rschroe @ sandia gov
History
2003-08-02: received
Short URL
https://ia.cr/2003/154
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2003/154,
      author = {Cheryl Beaver and Timothy Draelos and Richard Schroeppel and Mark Torgerson},
      title = {{ManTiCore}: Encryption with Joint Cipher-State Authentication},
      howpublished = {Cryptology {ePrint} Archive, Paper 2003/154},
      year = {2003},
      url = {https://eprint.iacr.org/2003/154}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.