Paper 2026/2801
Parallelizable modes for duplex-based authenticated encryption
, Radboud University Nijmegen, Radboud University Nijmegen, STMicroelectronics (Belgium)Abstract
This note enriches the SHAKE and TurboSHAKE-based authenticated encryption schemes defined by Daemen et al. at EuroS&P 2025 with parallelizable ones, while keeping their security properties. The main contribution is a new deck cipher mode, called FlightDeck, that has the ability of processing input strings similarly to KangarooTwelve and producing output strings as in counter mode, so both parallelizable. We then instantiate FlightDeck on top of the overwrite duplex (OD) construction, in turn on top of a Keccak-p permutation. Combined with a deck cipher-based mode like Deck-BO, the security of the resulting authenticated encryption schemes reduces to the PRF security of keyed (Turbo)SHAKE and to the collision resistance of (Turbo)SHAKE. Compared to the schemes defined at EuroS&P 2025, replacing UpperDeck with FlightDeck greatly improves their software efficiency as one can implement them with Keccak-p permutations evaluated in parallel.
Metadata
- Available format(s)
-
PDF
- Category
- Secret-key cryptography
- Publication info
- Preprint.
- Keywords
- committing authenticated encryptionsponge/duplex constructionduplex cipherdeck cipherSHA-3TurboSHAKE
- Contact author(s)
-
joan daemen @ ru nl
silvia mella @ ru nl
gilles vanassche @ st com - History
- 2026-11-09: approved
- 2026-11-06: received
- See all versions
- Short URL
- https://ia.cr/2026/2801
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2026/2801,
author = {Joan Daemen and Silvia Mella and Gilles Van Assche},
title = {Parallelizable modes for duplex-based authenticated encryption},
howpublished = {Cryptology {ePrint} Archive, Paper 2026/2801},
year = {2026},
url = {https://eprint.iacr.org/2026/2801}
}
