Paper 2026/591

A Note on HCTR++

Mustafa Khairallah, Nanyang Technological University
Abstract

A recent Accordion mode has been proposed by Öztürk et al.: HCTR++ construction proposed in [OKY26, Cryptology ePrint Archive, Paper 2026/383]. I identify a fundamental correctness flaw in the design. Specifically, I demon- strate that the decryption algorithm (Algorithm 2) does not correctly invert the encryption algorithm (Algorithm 1), rendering the scheme undecryptable as specified. The authors have acknowledged the use of AI to refine the conclusion section of their paper. I have discovered this vulnerability completely independently of any AI tools. However, as an exercise, I have provided the algorithm to both ChatGPT and Claude (free versions) in retrospect, to see if they can identify the flaw, and I report my comments/observations. I wish to emphasis that the authors have made no claims or acknowledgment of using AI tools beyond drafting and refining the introduction and conclusion sections, and I make no such claims either. The purpose of this note is point out the vulnerability (mistake) in the design, and to look into how free AI models approach finding it. I would like to also point out that the authors have since updated their design, and this note only refers to the original version. I have not studied the updated design and make no claims about it. Any comments made in this note are my own and do not reflect on the opinions of any affiliations or funding agencies.

Metadata
Available format(s)
PDF
Category
Secret-key cryptography
Publication info
Preprint.
Keywords
Accordion modeHCTR++
Contact author(s)
m khairallah @ ntu edu sg
History
2026-03-26: revised
2026-03-25: received
See all versions
Short URL
https://ia.cr/2026/591
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2026/591,
      author = {Mustafa Khairallah},
      title = {A Note on {HCTR}++},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/591},
      year = {2026},
      url = {https://eprint.iacr.org/2026/591}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.