Security of Multilinear Galois Mode (MGM)

Liliya Akhmetzyanova; Evgeny Alekseev; Grigory Karpunin; Vladislav Nozdrunov

Paper 2019/123

Security of Multilinear Galois Mode (MGM)

Liliya Akhmetzyanova, Evgeny Alekseev, Grigory Karpunin, and Vladislav Nozdrunov

Abstract

In this paper we analyze the new AEAD mode called the Multilinear Galois Mode (MGM) originally proposed in CTCrypt 2017. This mode is currently considered in the Russian Standardization system as the main contender to be adopted as a standard AEAD mode. The analysis of the MGM mode was carried out in the paradigm of provable security, in other words, lower security bounds were obtained for the Privacy and Authenticity notions. These bounds show that the privacy and authenticity of this mode is provably guaranteed (under security of the used block cipher) up to the birthday paradox bound.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint. MINOR revision.
Keywords: AEAD privacy integrity provable security
Contact author(s): lah @ cryptopro ru
History: 2019-02-13: received
Short URL: https://ia.cr/2019/123
License: CC BY

BibTeX

@misc{cryptoeprint:2019/123,
      author = {Liliya Akhmetzyanova and Evgeny Alekseev and Grigory Karpunin and Vladislav Nozdrunov},
      title = {Security of Multilinear Galois Mode ({MGM})},
      howpublished = {Cryptology {ePrint} Archive, Paper 2019/123},
      year = {2019},
      url = {https://eprint.iacr.org/2019/123}
}