Paper 2010/369

Double Ciphertext Mode : A Proposal for Secure Backup

Debrup Chakraborty and Cuauhtemoc Mancillas-Lopez


Security of data stored in bulk storage devices like the hard disk has gained a lot of importance in the current days. Among the variety of paradigms which are available for disk encryption, low level disk encryption is well accepted because of the high security guarantees it provides. In this paper we view the problem of disk encryption from a different direction. We explore the possibility of how one can maintain secure backups of the data, such that loss of a physical device will mean neither loss of the data nor the fact that the data gets revealed to the adversary. We propose an efficient solution to this problem through a new cryptographic scheme which we call as the double ciphertext mode (DCM). In this paper we describe the syntax of DCM, define security for it and give some efficient constructions. Moreover we argue regarding the suitability of DCM for the secure backup application and also explore other application areas where a DCM can be useful.

Available format(s)
Secret-key cryptography
Publication info
Published elsewhere. Unknown where it was published
Contact author(s)
debrup @ cs cinvestav mx
2010-06-28: received
Short URL
Creative Commons Attribution


      author = {Debrup Chakraborty and Cuauhtemoc Mancillas-Lopez},
      title = {Double Ciphertext Mode : A Proposal for Secure Backup},
      howpublished = {Cryptology ePrint Archive, Paper 2010/369},
      year = {2010},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.