Revisiting AES-GCM-SIV: Multi-user Security, Faster Key Derivation, and Better Bounds

No abstract is available for this paper.

• Publication year

  2018

• Venue

  IACR Cryptology ePrint Archive

• Publication date

  2018-04-29

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1007/978-3-319-78381-9_18
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• The Multi-user Security of Double Encryption

  2017cited by this paper
• Reconsidering the Security Bound of AES-GCM-SIV

  2017influential reference
• Analyzing Multi-key Security Degradation

  2017influential reference
• Information-Theoretic Indistinguishability via the Chi-Squared Method

  2017cited by this paper
• Identity-Based Format-Preserving Encryption

  2017cited by this paper
• AES-GCM-SIV: Specification and Analysis

  2017influential reference
• Better Bounds for Block Cipher Modes of Operation via Nonce-Based Key Derivation

  2017influential reference
• Hash-Function Based PRFs: AMAC and Its Multi-User Security

  2016cited by this paper
• Message-Recovery Attacks on Feistel-Based Format Preserving Encryption

  2016cited by this paper
• Key-Alternating Ciphers and Key-Length Extension: Exact Bounds and Multi-user Security

  2016cited by this paper
• The Multi-user Security of Authenticated Encryption: AES-GCM in TLS 1.3

  2016cited by this paper
• Analysis of VAES3 (FF2)

  2015cited by this paper
• GCM-SIV: Full Nonce Misuse-Resistant Authenticated Encryption at Under One Cycle per Byte

  2015cited by this paper
• Optimally Secure Block Ciphers from Ideal Primitives

  2015cited by this paper
• Multi-key Security: The Even-Mansour Construction Revisited

  2015influential reference
• Distinguishing a truncated random permutation from a random function

  2015cited by this paper
• Reconsidering Generic Composition

  2014cited by this paper
• Tight Security Bounds for Key-Alternating Ciphers

  2014cited by this paper
• VAES 3 scheme for FFX An addendum to “ The FFX Mode of Operation for Format-Preserving Encryption ”

  2011cited by this paper
• Introduction to Mirror Theory: Analysis of Systems of Linear Equalities and Linear Non Equalities for Cryptography

  2010cited by this paper
• The "Coefficients H" Technique

  2009cited by this paper
• A Proof of Security in O(2n) for the Xor of Two Random Permutations

  2008cited by this paper
• Deterministic Authenticated-Encryption: A Provable-Security Treatment of the Key-Wrap Problem

  2006cited by this paper
• New Blockcipher Modes of Operation with Beyond the Birthday Bound Security

  2006influential reference
• The Security and Performance of the Galois/Counter Mode (GCM) of Operation

  2004cited by this paper
• How to decrypt or even substitute DES-encrypted messages in 228 steps

  2002cited by this paper
• Indistinguishability of Random Systems

  2002cited by this paper
• Lecture Notes on Cryptography

  2001cited by this paper
• The Sum of PRPs Is a Secure PRF

  2000cited by this paper
• Public-Key Encryption in a Multi-user Setting: Security Proofs and Improvements

  2000cited by this paper
• Increasing the Lifetime of a Key: A Comparative Analysis of the Security of Re-keying Techniques

  2000influential reference
• A tool for obtaining tighter security analyses of pseudorandom function based constructions, with applications to PRP to PRF conversion

  1999cited by this paper
• Luby-Rackoff Backwards: Increasing Security by Making Block Ciphers Non-invertible

  1998cited by this paper
• A concrete security treatment of symmetric encryption

  1997cited by this paper
• Pseudorandom functions revisited: the cascade construction and its concrete security

  1996cited by this paper
• How to Forge DES-Encrypted Messages in $2^{28}$ Steps

  1996cited by this paper
• New Hash Functions and Their Use in Authentication and Set Equality

  1981cited by this paper
• Book Reviews

  1893influential reference

• Efficacy of Full-Packet Encryption in Mitigating Protocol Detection for Evasive VPNs

  2025cites this paper
• Multi User Security of LightMAC and LightMAC_Plus

  2025cites this paper
• Tight Multi-User Security of CCM and Enhancement by Tag-Based Key Derivation Applied to GCM and CCM

  2025cites this paper
• Blockcipher-Based Key Derivation without PRP/PRF Switching

  2025cites this paper
• DNDK: Combining Nonce and Key Derivation for Fast and Scalable AEAD

  2025influential citation
• A Robust Variant of ChaCha20-Poly1305

  2025cites this paper
• Towards Optimally Secure Deterministic Authenticated Encryption Schemes

  2025cites this paper
• KIVR: Committing Authenticated Encryption Using Redundancy and Application to GCM, CCM, and More

  2024cites this paper
• On the Tight Security of the Double Ratchet

  2024cites this paper
• Multiplex: TBC-based Authenticated Encryption with Sponge-Like Rate

  2024cites this paper
• A Long Tweak Goes a Long Way: High Multi-user Security Authenticated Encryption from Tweakable Block Ciphers

  2024cites this paper
• Flexible Password-Based Encryption: Securing Cloud Storage and Provably Resisting Partitioning-Oracle Attacks

  2023influential citation
• Tight Multi-User Security Bound of sfDbHtS

  2023cites this paper
• GCM-SIV1.5: Optimal Tradeoff between GCM-SIV1 and GCM-SIV2

  2023influential citation
• Attacking the IETF/ISO Standard for Internal Re-keying CTR-ACPKM

  2023cites this paper
• When Messages are Keys: Is HMAC a dual-PRF?

  2023cites this paper
• Improved Multi-User Security Using the Squared-Ratio Method

  2023cites this paper
• Cascading Four Round LRW1 is Beyond Birthday Bound Secure

  2023cites this paper
• Upgrading AEAD Privacy: The AE2 goal

  2023cites this paper
• KIVR: Context-Committing Authenticated Encryption Using Plaintext Redundancy and Application to GCM and Variants

  2023cites this paper
• Generic attacks on small-state stream cipher constructions in the multi-user setting

  2023cites this paper
• The Multi-User Constrained Pseudorandom Function Security of Generalized GGM Trees for MPC and Hierarchical Wallets

  2023cites this paper
• Tight Multi-User Security Bound of DbHtS (Long Paper)

  2022cites this paper
• Triplex: an Efficient and One-Pass Leakage-Resistant Mode of Operation

  2022cites this paper
• Multi-User Security of the Sum of Truncated Random Permutations (Full Version)

  2022cites this paper
• Multi-user BBB security of public permutations based MAC

  2022cites this paper
• Efficient Schemes for Committing Authenticated Encryption

  2022influential citation
• Revisiting the Extension of Matsui's Algorithm 1 to Linear Hulls: Application to TinyJAMBU

  2022cites this paper
• A Survey on Applications of H-Technique: Revisiting Security Analysis of PRP and PRF

  2022cites this paper
• A Sponge-Based PRF with Good Multi-user Security

  2022cites this paper
• A Concrete-Security Analysis of the Apple PSI Protocol

  2021cites this paper
• Toward a Fully Secure Authenticated Encryption Scheme From a Pseudorandom Permutation (Full Version)

  2021cites this paper
• The Security of ChaCha20-Poly1305 in the Multi-User Setting

  2021influential citation
• Lightweight Authenticated Encryption Mode with Enhancing Security Guarantees

  2021cites this paper
• Better Concrete Security for Half-Gates Garbling (in the Multi-Instance Setting)

  2020cites this paper
• Towards Low-Energy Leakage-Resistant Authenticated Encryption from the Duplex Sponge Construction

  2020cites this paper
• Security under Message-Derived Keys: Signcryption in iMessage

  2020cites this paper
• INT-RUP Secure Lightweight Parallel AE Modes

  2020cites this paper
• Tightly Close It, Robustly Secure It: Key-Based Lightweight Process for Propping up Encryption Techniques

  2020cites this paper
• The Summation-Truncation Hybrid: Reusing Discarded Bits for Free

  2020cites this paper
• Security of Streaming Encryption in Google's Tink Library

  2020influential citation
• On the Adaptive Security of MACs and PRFs ∗†

  2020cites this paper
• Signcryption in iMessage

  2020cites this paper
• Revisiting the Security of DbHtS MACs: Beyond-Birthday-Bound in the Multi-User Setting

  2020cites this paper
• Key Management Systems at the Cloud Scale

  2019influential citation
• On The Distinguishability of Ideal Ciphers

  2019cites this paper
• Nonces are Noticed: AEAD Revisited

  2019cites this paper
• Beyond Birthday Bound Secure MAC in Faulty Nonce Model

  2019cites this paper
• TEDT, a Leakage-Resilient AEAD mode for High (Physical) Security Applications

  2019cites this paper
• Linking Stam's Bounds with Generalized Truncation

  2019cites this paper
• The Multi-user Security of GCM, Revisited: Tight Bounds for Nonce Randomization

  2018cites this paper
• Revisiting Key-alternating Feistel Ciphers for Shorter Keys and Multi-user Security

  2018cites this paper
• DiSE: Distributed Symmetric-key Encryption

  2018cites this paper
• Applications of H-Technique: Revisiting Symmetric Key Security Analysis

  2018cites this paper
• Luby-Rackoff Backwards with More Users and More Security

  year unknowncites this paper
• On the Adaptive Security of MACs and PRFs (cid:63)

  year unknowncites this paper