Re: [Cfrg] new authenticated encryption draft

Hello David,

Thank you for this.

I am developing AEAD methods based on UMAC and VMAC. (VMAC is a 64- 
bit cousin to UMAC that MACs at a peak rate of 0.5 cpb on 64-bit  
architectures.) I will keep your recommendations in mind while making  
my definitions, and if I have any comments I'll get them to you ASAP.

One thing my definition does is allow for associated data to be added  
after encryption, so an encryption can have both an authenticated  
header and footer. (What is MACed is Header||Ciphertext||Footer.)  
This seems like it might be useful if one is encrypting something  
long. If a scheme only can MAC Header||Ciphertext, and one wants to  
MAC Header||Ciphertext||Footer, then what must be done is buffer  
Ciphertext until Footer is ready and MAC Header||Footer||Ciphertext.

Do your definitions allow for such flexibility? Is my intuition that  
Footers may be useful valid?

If you are curious about my schemes, you can see them at fastcrypto.org.

Cheers,
Ted

_______________________________________________
Cfrg mailing list
Cfrg@ietf.org
https://www1.ietf.org/mailman/listinfo/cfrg