The Security and Performance of the Galois/Counter Mode (GCM) of Operation

The Security and Performance of the Galois/Counter Mode (GCM) of Operation (2004)

by David A. McGrew , John Viega

Venue:	In INDOCRYPT, volume 3348 of LNCS
Citations:	26 - 1 self

User correction supplied by SystemCorrections

Datum	Value	Source
TITLE	The Security and Performance of the Galois/Counter Mode (GCM) of Operation	SVM HeaderParse 0.1
AUTHOR NAME	David A. McGrew	user correction - Legacy Corrections
AUTHOR AFFIL	† Cisco Systems, Inc., ‡ Secure Software	user correction - Legacy Corrections
AUTHOR NAME	John Viega	user correction - Legacy Corrections
AUTHOR AFFIL	† Cisco Systems, Inc., ‡ Secure Software	user correction - Legacy Corrections
ABSTRACT	The recently introduced Galois/Counter Mode (GCM) of operation for block ciphers provides both encryption and message authentication, using universal hashing based on multiplication in a binary finite field. We analyze its security and performance, and show that it is the most e#cient mode of operation for high speed packet networks, by using a realistic model of a network crypto module and empirical data from studies of Internet tra#c in conjunction with software experiments and hardware designs. GCM has several useful features: it can accept IVs of arbitrary length, can act as a stand-alone message authentication code (MAC), and can be used as an incremental MAC. We show that GCM is secure in the standard model of concrete security, even when these features are used. We also consider several of its important system-security aspects.	user correction - Legacy Corrections
YEAR	2004	INFERENCE
VENUE	In INDOCRYPT, volume 3348 of LNCS	INFERENCE
VENUE TYPE	CONFERENCE	INFERENCE
PAGES	343--355	INFERENCE
CITATIONS	23 found	ParsCit 1.0