Generic Attack on Duplex-Based AEAD Modes using Random Function Statistics

ePrint Report: Generic Attack on Duplex-Based AEAD Modes using Random Function Statistics

Henri Gilbert, Rachelle Heim Boissier, Louiza Khati, Yann Rotella

Duplex-based authenticated encryption modes with a sufficiently large key length are proven to be secure up to the birthday bound 2^(c/2), where c is the capacity. However this bound is not known to be tight and the complexity of the best known generic attack, which is based on multicollisions, is much larger: it reaches (2^c)/α where α represents a …

aead attack complexity encryption eprint report function gilbert heim key large length random report statistics