[Cfrg] The new submission "AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption"

Shay Gueron <shay.gueron@gmail.com> Sun, 06 March 2016 03:50 UTC

MIME-Version: 1.0
Date: Sun, 06 Mar 2016 05:50:18 +0200
Message-ID: <CAHP81y_d97vxRad0JwYksLqjY5rmayNEGBEPEL1tfy-EntU-VA@mail.gmail.com>
From: Shay Gueron <shay.gueron@gmail.com>
To: cfrg@irtf.org
Content-Type: multipart/alternative; boundary="001a114e499a2e3e94052d593f61"
Archived-At: <http://mailarchive.ietf.org/arch/msg/cfrg/ytIRbb298R744DEzM1Iyd-IZthY>
Cc: Yehuda Lindell <Yehuda.Lindell@biu.ac.il>, Adam Langley <agl@google.com>
Subject: [Cfrg] The new submission "AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption"
Precedence: list

Hello CFRG,



We would like to draw your attention to our new submission draft entitled
“AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption”. Posted on
https://www.ietf.org/internet-drafts/draft-gueron-gcmsiv-00.txt



The submission specifies two authenticated encryption algorithms that are
nonce misuse-resistant. Their performance is expected to be roughly on par
with AES-GCM, when run on modern processors that have AES instructions.



Security and performance analysis can be found in S. Gueron and Y. Lindell.
GCM-SIV: Full Nonce Misuse-Resistant Authenticated Encryption at Under One
Cycle per Byte. In 22nd ACM CCS, pages 109-119, 2015.



We hope that the CFRG will take this up as a working-group item.



Thank you,



Shay Gueron, Adam Langley, Yehuda Lindell

[Cfrg] The new submission "AES-GCM-SIV: Nonce Mis… Shay Gueron
Re: [Cfrg] The new submission "AES-GCM-SIV: Nonce… Björn Edström
Re: [Cfrg] The new submission "AES-GCM-SIV: Nonce… Shay Gueron
Re: [Cfrg] The new submission "AES-GCM-SIV: Nonce… Taylor R Campbell