# Is there an existing AEAD scheme with minimal IV requirements?

Is there an existing AEAD scheme such that, for inputs with the same AD and IV

1. ciphertexts are allowed to leak whether or not their plaintexts are equal,
2. if the scheme can process the plaintext in a streaming manner, then it is allowed to leak where different plaintexts have their first difference, and
3. is otherwise secure against an adversary that can choose the IVs used for encryption?
-
You can in principle describe AES-CBC with encrypted IV + an IV-less MAC (CBC-MAC or HMAC) as an AEAD. I think it'd fulfill your requirements. –  CodesInChaos Apr 13 '13 at 20:35
I'm not clear on what you mean by "encrypted IV", but I think that would allow detecting $\hspace{1 in}$ equality of plaintexts that had different cleartexts. $\:$ –  Ricky Demer Apr 13 '13 at 20:59

The AE proof for the last link uses random IVs, and I can't figure out whether it actually needs those. $\hspace{.55 in}$ (SIV mode seems fine, though.) $\;\;$ –  Ricky Demer Apr 14 '13 at 23:14