Abstract

this documentwe propose a new mode of operation for symmetric key block cipher algorithms. The main feature distinguishing the proposed mode from existing modes is that along with providing confidentiality of the message, it also provides message integrity. In other words, the new mode is not just a mode of operation for encryption, but a mode of operation for authenticated encryption. As the title of the document suggests, the new mode achieves the additional property with little extra overhead, as will be explained below. The new mode is also highly parallelizable. In fact, it has critical path of only two block cipher invocations. By one estimate, a hardware implementation of this mode on a single board (housing 1000 block cipher units) achieves terabits/sec (10 12 bits/sec) of authenticated encryption. Moreover, there is no penalty for doing a serial implementation of this mode. The new mode also comes with proofs of security, assuming that the underlying block ciphers are secure. For confidentiality,themode achieves the same provable security bound as CBC. For authentication, the mode achieves the same provable security bound as CBC-MAC. The new parallelizable mode removes chaining from the well known CBC mode, and instead does an input whitening (as well an output whitening) with a pairwise independent sequence. Thus, it becomes similar to the ECB mode. However, with the input whitening with the pairwise independent sequence the new mode has provable security similar to CBC (Note: ECB does not have security guarantees like CBC). Also, the output whitening with the pairwise independent sequence guarantees message integrity. The pairwise independent sequence can be generated with little overhead. In fact, the input and output whitening sequence need only be pairwi...

Citations

296	A Concrete Security Treatment of Symmetric Encryption - Bellare, Desai, et al. - 1997
140	Pseudorandomness and Cryptographic Applications - LUBY - 1996
137	The security of cipher block chaining - Bellare, Kilian, et al. - 1994
100	LFSR-based Hashing and Authentication - Krawczyk
44	Cryptography: A New Dimension in Computer Data Security - Meyer, Matyas - 1982
40	American National Standard for Information Systems-Data Link Encryption - 106 - 1983
9	Data cryptographic techniques — data integrity mechanism using a cryptographic check function employing a block cipher algorithm - ISOIEC - 1989
8	Information processing - Modes of operation for a 64-bit block cipher algorithm", International Organization for Standardization - ISO - 1987
6	Chanathip Namprempre: Authenticated Encryption: Relations among Notions and Analysis of the Generic Composition Paradigm - Bellare - 1976
3	RFC 1510,"The Kerberos network authentication service (V5 - Kohl, Neuman - 1993