[Resource Topic] 2024/1339: Comprehensive Robustness Analysis of GCM, CCM, and OCB3

Welcome to the resource topic for 2024/1339

Title:
Comprehensive Robustness Analysis of GCM, CCM, and OCB3

Authors: Akiko Inoue, Tetsu Iwata, Kazuhiko Minematsu

Abstract:

Clarifying the robustness of authenticated encryption (AE) schemes, such as security under nonce misuse or Release of Unverified Plaintext (RUP), is critically important due to the extensive use of AEs in real-world applications.
We present a comprehensive analysis of the robustness of well-known standards, namely GCM, CCM, and OCB3. Despite many existing studies, we uncovered several robustness properties for them that were not known in the literature.
In particular, we show that both GCM and CCM maintain authenticity under RUP. Moreover, CCM keeps this feature even if a nonce is misused. Together with existing analysis, our work gives a complete picture of the robustness of these standards for the first time. Our results also imply several new robust AE schemes based on GCM and CCM.

ePrint: https://eprint.iacr.org/2024/1339

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .