IETF Logo Mail Archive

[CFRG] Re: Random-access authenticated encryption (raAE) draft

Jack Grigg <ietf@jackgrigg.com> Tue, 14 July 2026 22:58 UTC

Return-Path: <me@jackgrigg.com>
X-Original-To: cfrg@mail2.ietf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id B804C116DE798 for <cfrg@mail2.ietf.org>; Tue, 14 Jul 2026 15:58:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784069934; bh=9NSQOIEw9qGO00UU/QIN70CDwmd9VvmHF6tcPbJgNkI=; h=References:In-Reply-To:Reply-To:From:Date:Subject:To:Cc; b=pKrCCbZSC7OfutLlvQnOcmQJ53HEnKQu8QOrMDLtwZSnlWzafvsQ9aQ5usVkMq5q+ yZwPisVNVa08SKIXRSfWYt2BexFi2gbJPlHKcnxJtN+36eGH8O5VMyHbQrIV1vONXF j3V8zUrcX6t5V+mBGnenulKqye7yCnTqDIldOSYA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level:
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sxbRUxyWkChs for <cfrg@mail2.ietf.org>; Tue, 14 Jul 2026 15:58:54 -0700 (PDT)
Received: from mail-ej1-f45.google.com (mail-ej1-f45.google.com [209.85.218.45]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5BC32116DE78C for <cfrg@irtf.org>; Tue, 14 Jul 2026 15:58:54 -0700 (PDT)
Received: by mail-ej1-f45.google.com with SMTP id a640c23a62f3a-c15b509c323so628994566b.0 for <cfrg@irtf.org>; Tue, 14 Jul 2026 15:58:54 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1784069927; cv=none; d=google.com; s=arc-20260327; b=Teq+BKIKVi0Nd8P5qdRvjvbvY+NmbZZRSO8+MFv47yPYaDyZsID18Etxgd5mjI4EK0 31/K6nNDw9S4HuE9V9yZP3ivOdb0vdootz0UWWHhcfUr/yGRL76beCWHRXQpimJ1hy9k f/xhu/W0zxp2BeKj9/pOX+9LaS0kTK40a5uImXzcWWkfHQCR3tzPFgmc/QIs2DHnyhG0 vno8mHNM+u4CLYG/I2cme+Lbez0Kh80MeMkJQnUW2yC3kN//6Gzjk0yx/8vHLuWQzRyL NyarxXWAQ0uB3XPGXcjSn00guuEgfJVJI/eGbDHOwN3W9Ggs6sWgS9xyvDolg5vROb19 VsVQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version; bh=9NSQOIEw9qGO00UU/QIN70CDwmd9VvmHF6tcPbJgNkI=; fh=R8er/3k1Ct9lgC9DTdDmB7WiJ/62Cmu7in54jguQnaY=; b=io1y/opa4cEILZ85UU2IURhbGXVqAIZNbIh5IQUvgl9lYR+NTmTNlLy+DNbO5TE+vw KKM51M8O5tzASaiBHwf3A9kSSu406COoDWCV2X8UYtliACsu7HeTLOuet5a/pMEyub5N jeBAALSjoE8a2pDSv+AzF1LXOPVImKAz8J6rlIx8yn6fx9uU6xZKEZAAhwPSl6IMazGI xJ0NFEYZcqWMZPxo9FeVtSoPiEyD5OX2MbQy2xtvxksm4Ua5hrKLcnwq3iucnuv7WOkY zgMUsk0AbPdLidpq0P8Nb9bPLTq1lP1+G1NrKG/hFx5+HdnesOk4BRgmkgnXx0Ezgmvu 1s5w==; darn=irtf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784069927; x=1784674727; h=content-type:cc:to:subject:message-id:date:from:reply-to :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=9NSQOIEw9qGO00UU/QIN70CDwmd9VvmHF6tcPbJgNkI=; b=N3n0vMab6YpaBE36vSHYMBctbSEFf7/4Ngd4p+3L0R5F1TEPCA1HGJL7bZOj2iG8MS hYd31qdXYdy9DbRuwQZh4pHxdPi5jHBW4tdssPAJWlH92aEd3BunpJVoKJCsXYcG2bN+ aE5LkHWkO+wO+C0EYoVzCYrHR2NPoN86GEO+ea+lQHRJo3ZolgLIDZQiXW1nXjrVK434 GV2gmmnDekWCbwlCY4ESBLd39tUWVTVTLWe0d+n72qi69OsCDFfE1DHzan9q1PQvA/e1 ah4eketYX6J+6Y6pmN6mz+WBqIFWBhcY6dNv68QHOvBnQVHsL6vuPQXA6XxJBMVEB4cP rkCw==
X-Gm-Message-State: AOJu0Yx0m8fTeZA/xBVvTiauwbt4GrM9JqHST67V6dUCXIJJkK24kZm/ DPxDYBBg5+JRssL40cEURRh9pW7nuLSp052zqS5G3hvJ9dHzX0o7GZZhrv5O8oc2UM484T2yx7p BnjvWSnezxM7Xc9QDuLWlIJVehIP8f4UL0v8ntVU+YGZySxKj1QGM/aPnPg==
X-Gm-Gg: AfdE7cncRW2F/WwhI/2bZoZyW7B56aDf5LogkacwGWaP4iTtgZmL7QaYf0CrHSfMyjU fzQpbVsyZqNeQmdQD0NeL+/ISY8RfHP9UBQ3mXgBPjqX5jmCdCDskJBdqD+0hf6/D4iBEiSTUHL YvxHr87tM5mR9OuVLWcWlsVA8JM7GlliLnWZSTc6TxhdyDxzlowk8D/A47B2R/smYxwCN9LsCTH DEBu4OByGayVXYRvRhQ+vu9cUagfQ3VdVjMgKAc15QmWCUUvm3z0jaSiWpH4TDIoCKJoAGc
X-Received: by 2002:a17:907:7ba5:b0:c16:165e:c3ab with SMTP id a640c23a62f3a-c16678c8835mr239498366b.7.1784069926241; Tue, 14 Jul 2026 15:58:46 -0700 (PDT)
MIME-Version: 1.0
References: <CAOjisRximY8dNJVFkYyHogh6UyH6HOUK==yt8+b-Muy9VntX9Q@mail.gmail.com> <ef6adb6e-cc5e-4021-96c7-4691404c9b1b@app.fastmail.com> <AS4PR07MB8825389E838C161453B02DA989F92@AS4PR07MB8825.eurprd07.prod.outlook.com>
In-Reply-To: <AS4PR07MB8825389E838C161453B02DA989F92@AS4PR07MB8825.eurprd07.prod.outlook.com>
From: Jack Grigg <ietf@jackgrigg.com>
Date: Tue, 14 Jul 2026 23:58:34 +0100
X-Gm-Features: AUfX_mxEDe5KQsshpo2KH5a5puLvro3eNKNsImNIVNdJ26ri97QH27I0Bf9kNl4
Message-ID: <CAPC=aNUAwA8HQaqSgE0PWYWqpNpiyP3Ze15Zrr3u4fPfzB4Uxw@mail.gmail.com>
To: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="00000000000035591006569a26bc"
Message-ID-Hash: DYH7XW2HB5TFPVKIIZRVFT5DOZ5SZ2EZ
X-Message-ID-Hash: DYH7XW2HB5TFPVKIIZRVFT5DOZ5SZ2EZ
X-MailFrom: me@jackgrigg.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "cfrg@irtf.org" <cfrg@irtf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Reply-To: ietf@jackgrigg.com
Subject: [CFRG] Re: Random-access authenticated encryption (raAE) draft
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/NiJV_3aWcuzgvrXUkCEc_9hjJTs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>

Hi John,

On Tue, Jul 14, 2026 at 9:26 AM John Mattsson <john.mattsson=
40ericsson.com@dmarc.ietf.org> wrote:

> openssl-cms - CMS and age are modern secure options but lack random
> access.
> https://github.com/filosottile/age
>

The age v1 format is based on STREAM and does support random access; I have
Seek implemented in my Rust library [0]. It does require reading the final
chunk (to authenticate length) in order to seek from the end, but otherwise
it can seek to the 64 kiB chunk boundaries and then read within the chunk.
It doesn't support in-place rewrites (but that's partly intentional).

Cheers,
Jack

[0]
https://github.com/str4d/rage/blob/b5b68c4f4f7ea5c368bc060f6fe0237549c3a13f/age/src/primitives/stream.rs#L534-L681

v2.46.0 | Report a Bug | By Email | System Status