Citation Context

...ge of using the counter mode of encryption is that it becomes easy to tackle variable length messages. The first construction of the hash-counter-hash type was XCB [10]. A later construction was HCTR =-=[15]-=-. Another construction which has a structure similar to XCB was ABL [12]. Even though the structure is similar to that of XCB, ABL is significantly slower—it consists of essentially three counter laye...

Citation Context

...nce it is slower than TET. Hash-Ctr-Hash. Here the counter mode of operation is used to instantiate the encryption layer. The first construction of this type is XCB [11]. Later constructions are HCTR =-=[18]-=- and HCH [3]. When they appeared, XCB did not have a concrete security bound and HCTR had a cubic bound. Recently, however, quadratic bounds have been proved for both – in [12] for XCB and in [2] for ...

Citation Context

...on oracles. A tweakable SPRP provides a mode of operation having all the advantages of an SPRP with the additional flexibility of having a tweak. The constructions CMC [4], EME [5], EME∗ [3] and HCTR =-=[17]-=- are proved to be tweakable SPRPs under the assumption that the underlying block cipher is an SPRP. As mentioned in [4], such a primitive is well suited for disk encryption where the tweak can be cons...

Citation Context

...e message space {0, 1}≥n. Halevi does this in his EME∗ and TET constructions [12, 13]; Fluhrer and McGrew do it (without a provable-security guarantee) with XCB [20]; Wang, Feng, and Wu do it in HCTR =-=[30]-=-; and Chakraborty and Sarkar do it in HCH [9]. All of these constructions are somewhat complex, and their methods for dealing with “inconvenient-length” strings are non-generic. Constructions of ciphe...

Citation Context

...sh-ECBHash type and Hash-Counter-Hash type. CMC [6], EME [7] and EME ∗ [4] fall under the Encrypt-Mask-Encrypt group. PEP [3], TET [5] and HEH[15] fall under the Hash-ECB-Hash type and XCB [11], HCTR =-=[16]-=-, HCH, HCHfp [2], ABL [12] fall under the Hash-Counter-Hash type. The Encrypt-Mask-Encrypt type constructions require two layers of encryption with a light weight masking layer in between. The other t...

Citation Context

... primitive is called a tweakable enciphering scheme (TES). The known constructions of TESs can be broadly divided into two types: encrypt-mix-encrypt type [5, 6, 3, 19] and the hash-encrypt-hash type =-=[11, 12, 21, 2, 4, 18]-=-. The first type uses a block cipher while the second type additionally requires a finite field multiplier. The feature common to all previous constructions is that they require both the encryption an...

Citation Context

...sh-ECB-Hash type and Hash-Counter-Hash type. CMC [12], EME [13], EME ∗ [10] fall under the Encrypt-Mask-Encrypt group. PEP [4], TET [11], HEH [31] fall under the Hash-ECB-Hash type and XCB [24], HCTR =-=[34]-=-, HCH [5], ABL [26] fall under the HashCounter-Hash type. Although till date about ten different TES constructions have been proposed, no experimental data of these schemes have been published yet. Fr...

Citation Context

... Rivest and Wagner, there has been substantial work on building tweakable ciphers. Examples capable of handling long inputs (required for FDE) include CMC [19], EME [20], HEH [38], HCH [14], and HCTR =-=[41]-=-. Loosely speaking, the common approach has been to build up the VIL primitive from an underlying n-bit blockcipher, sometimes in concert with one or more hashing operations. The security guaranteed b...