This paper re-examines the security of three related block cipher modes of operation designed to provide authenticated encryption. These modes, known as PES-PCBC, IOBC and EPBC, were all proposed in the mid-1990s. However, analyses of security of the latter two modes were published more recently. In each case one or more papers describing security issues with the schemes were eventually published, although a flaw in one of these analyses (of EPBC) was subsequently discovered; this means that until now EPBC had no known major issues. This paper establishes that, despite this, all three schemes possess defects which should prevent their use, especially as there are a number of efficient alternative schemes possessing proofs of security.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Integrity-Protecting Block Cipher Modes—Untangling a Tangled Web

  • Chris J. Mitchell

摘要

This paper re-examines the security of three related block cipher modes of operation designed to provide authenticated encryption. These modes, known as PES-PCBC, IOBC and EPBC, were all proposed in the mid-1990s. However, analyses of security of the latter two modes were published more recently. In each case one or more papers describing security issues with the schemes were eventually published, although a flaw in one of these analyses (of EPBC) was subsequently discovered; this means that until now EPBC had no known major issues. This paper establishes that, despite this, all three schemes possess defects which should prevent their use, especially as there are a number of efficient alternative schemes possessing proofs of security.