Limits on Authenticated Encryption Use in TLS

ePrint Report: Limits on Authenticated Encryption Use in TLS

Atul Luykx, Kenneth G. Paterson

This technical note presents limits on the security (as a function of the number of plaintext bytes encrypted and the number of forgery attempts made by an adversary) for the main Authenticated Encryption schemes available in TLS 1.2 and the draft of TLS 1.3. These limits are derived from security proofs for the considered schemes available in the literature. Our intention is to provide considered technical …

adversary encrypted encryption eprint report forgery function main plaintext report security technical tls tls 1.2