OMD: A Compression Function Mode of Operation for Authenticated Encryption - Inria EPFL Access content directly
Conference Papers Year : 2014

OMD: A Compression Function Mode of Operation for Authenticated Encryption

Abstract

We propose the Offset Merkle-Damgård (OMD) scheme, a mode of operation to use a compression function for building a nonce-based authenticated encryption with associated data. In OMD, the parts responsible for privacy and authenticity are tightly coupled to minimize the total number of compression function calls: for processing a message of ℓ blocks and associated data of a blocks, OMD needs ℓ+a+2 calls to the compression function (plus a single call during the whole lifetime of the key). OMD is provably secure based on the standard pseudorandom function (PRF) property of the compression function. Instantiations of OMD using the compression functions of SHA-256 and SHA-512, called OMD-SHA256 and OMD-SHA512, respectively, provide much higher quantitative level of security compared to the AES-based schemes. OMD-SHA256 can benefit from the new Intel SHA Extensions on next-generation processors.

Keywords

Dates and versions

hal-01098397 , version 1 (24-12-2014)

Identifiers

Cite

Simon Cogliani, Diana-Stefania Maimut, David Naccache, Rodrigo Portella, Reza Reyhanitabar, et al.. OMD: A Compression Function Mode of Operation for Authenticated Encryption. Selected Areas in Cryptography 2014, IACR, Aug 2014, Montreal, Quebec, Canada. ⟨10.1007/978-3-319-13051-4_7⟩. ⟨hal-01098397⟩
116 View
0 Download

Altmetric

Share

Gmail Facebook X LinkedIn More