Paper 2004/125

EME*: extending EME to handle arbitrary-length messages with associated data

Shai Halevi

Abstract

This work describes a mode of operation, EME*, that turns a regular block cipher into a length-preserving enciphering scheme for messages of (almost) arbitrary length. Specifically, the resulting scheme can handle any bit-length, not shorter than the block size of the underlying cipher, and it also handles associated data of arbitrary bit-length. Such a scheme can either be used directly in applications that need encryption but cannot afford length expansion, or serve as a convenient building block for higher-level modes. The mode EME* is a refinement of the EME mode of Halevi and Rogaway, and it inherits the efficiency and parallelism from the original EME.

Metadata
Available format(s)
PDF PS
Category
Secret-key cryptography
Publication info
Published elsewhere. Unknown where it was published
Keywords
Block-cipher usagecryptographic standardsmodes of operationprovable securitysector-level encryptionsymmetric encryption
Contact author(s)
shaih @ watson ibm com
History
2004-05-27: last of 2 revisions
2004-05-26: received
See all versions
Short URL
https://ia.cr/2004/125
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2004/125,
      author = {Shai Halevi},
      title = {{EME}*: extending {EME} to handle arbitrary-length messages with associated data},
      howpublished = {Cryptology {ePrint} Archive, Paper 2004/125},
      year = {2004},
      url = {https://eprint.iacr.org/2004/125}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.