[Resource Topic] 2017/1137: Note on the Robustness of CAESAR Candidates

Welcome to the resource topic for 2017/1137

Title:
Note on the Robustness of CAESAR Candidates

Authors: Daniel Kales, Maria Eichlseder, Florian Mendel

Abstract:

Authenticated ciphers rely on the uniqueness of the nonces to meet their security goals. In this work, we investigate the implications of reusing nonces for three third-round candidates of the ongoing CAESAR competition, namely Tiaoxin, AEGIS and MORUS. We show that an attacker that is able to force nonces to be reused can reduce the security of the ciphers with results ranging from full key-recovery to forgeries with practical complexity and a very low number of nonce-misuse queries.

ePrint: https://eprint.iacr.org/2017/1137

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .