scholarly journals Relations Among Notions of Plaintext Awareness

2008 ◽  
pp. 47-64 ◽  
Author(s):  
James Birkett ◽  
Alexander W. Dent
Keyword(s):  
Plaintext Awareness

scholarly journals Plaintext awareness in identity-based key encapsulation

2013 ◽  
Vol 13 (1) ◽  
pp. 25-49 ◽  
Author(s):  
Mark Manulis ◽  
Bertram Poettering ◽  
Douglas Stebila
Keyword(s):  
Identity Based ◽  
Plaintext Awareness

scholarly journals Release of Unverified Plaintext: Tight Unified Model and Application to ANYDAE

2020 ◽  
pp. 119-146
Author(s):  
Donghoon Chang ◽  
Nilanjan Datta ◽  
Avijit Dutta ◽  
Bart Mennink ◽  
Mridul Nandi ◽  
...  
Keyword(s):  
Block Cipher ◽  
Block Size ◽  
Unified Model ◽  
Constant Time ◽  
Encryption Scheme ◽  
Security Model ◽  
Authenticated Encryption ◽  
Encryption Schemes ◽  
Plaintext Awareness ◽  
Mixing Functions

Authenticated encryption schemes are usually expected to offer confidentiality and authenticity. In case of release of unverified plaintext (RUP), an adversary gets separated access to the decryption and verification functionality, and has more power in breaking the scheme. Andreeva et al. (ASIACRYPT 2014) formalized RUP security using plaintext awareness, informally meaning that the decryption functionality gives no extra power in breaking confidentiality, and INT-RUP security, covering authenticity in case of RUP. We describe a single, unified model, called AERUP security, that ties together these notions: we prove that an authenticated encryption scheme is AERUP secure if and only if it is conventionally secure, plaintext aware, and INT-RUP secure. We next present ANYDAE, a generalization of SUNDAE of Banik et al. (ToSC 2018/3). ANYDAE is a lightweight deterministic scheme that is based on a block cipher with block size n and arbitrary mixing functions that all operate on an n-bit state. It is particularly efficient for short messages, it does not rely on a nonce, and it provides maximal robustness to a lack of secure state. Whereas SUNDAE is not secure under release of unverified plaintext (a fairly simple attack can be mounted in constant time), ANYDAE is. We make handy use of the AERUP security model to prove that ANYDAE achieves both conventional security as RUP security, provided that certain modest conditions on the mixing functions are met. We describe two simple instances, called MONDAE and TUESDAE, that conform to these conditions and that are competitive with SUNDAE, in terms of efficiency and optimality.

scholarly journals Plaintext Awareness via Key Registration

2003 ◽  
pp. 548-564 ◽  
Author(s):  
Jonathan Herzog ◽  
Moses Liskov ◽  
Silvio Micali
Keyword(s):  
Plaintext Awareness
Sign in / Sign up

Export Citation Format

Share Document