We consider two possible notions of authenticity for symmetric encryption schemes, namely
integrity of plaintexts and integrity of ciphertexts, and relate them to the standard notions of …

We describe a parallelizable block-cipher mode of operation that simultaneously provides
privacy and authenticity. OCB encrypts-and-authenticates a nonempty string M∈{0, 1} …

We study software performance of authenticated-encryption modes CCM, GCM, and OCB.
Across a variety of platforms, we find OCB to be substantially faster than either alternative …

We define a new mode of operation for block encryption which in addition to assuring
confidentiality also assures message integrity. In contrast, previously for message integrity a …

Contents Page 1 CRITICAL PERSPECTIVES ON PROVABLE SECURITY: FIFTEEN YEARS OF
“ANOTHER LOOK” PAPERS NEAL KOBLITZ AND ALFRED MENEZES Abstract. We give an …

We define a new authentication tree in the symmetric key setting, which has the same
computational time, storage and security parameters as the well known Merkle …

Background. Throughout this article we will consider the AE problem in the “symmetric-key
model.” This means that we assume our two communicating parties, traditionally called …

We define a new mode of operation for block ciphers which, in addition to providing
confidentiality, also ensures message integrity. In contrast, previously for message integrity a …

The recent selection of the AES block cipher to replace DES has generated interest in
developing new modes of operation to supplement the modes defined as part of the DES …

OCB (v1.1) Page 1 OCB (v1.1) Submitted and designed by Ted Krovetz and Phillip Rogaway
ted@krovetz.net 15 September 2016 Here OCB means the algorithm of RFC 7253 [1]. Rather …