Committing Authenticated Encryption: Sponges vs. Block-Ciphers in the case of the NIST LWC Finalists

ePrint Report: Committing Authenticated Encryption: Sponges vs. Block-Ciphers in the case of the NIST LWC Finalists

Juliane Krämer, Patrick Struck, Maximiliane Weishäupl

Committing security has gained considerable attention in the field of authenticated encryption (AE). This can be traced back to a line of recent attacks, which suggests that AE schemes used in practice should not only provide confidentiality and authenticity, but also committing security. Roughly speaking, a committing AE scheme guarantees that ciphertexts will decrypt only for one key. …

attacks attention back block case ciphers encryption eprint report nist report security