Authenticated Encryption with Key Identification

ePrint Report: Authenticated Encryption with Key Identification

Julia Len, Paul Grubbs, Thomas Ristenpart

Authenticated encryption with associated data (AEAD) forms the core of much of symmetric cryptography, yet the standard techniques for modeling AEAD assume recipients have no ambiguity about what secret key to use for decryption. This is divorced from what occurs in practice, such as in key management services, where a message recipient can store numerous keys and must identify the correct key before decrypting. To date there …

encryption eprint report identification key