Timeline for Non-committing authenticated encryption schemes vs committing authenticated encryption schemes
Current License: CC BY-SA 4.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 26, 2022 at 14:51 | history | edited | Maarten Bodewes♦ | CC BY-SA 4.0 |
slight rewording, 2 x "after all"
|
| May 25, 2022 at 20:13 | comment | added | kelalaka | A non-committing authenticated is not restricted to finding another ciphertext/tag combination with a different key. The attacker is free to choose $k_1, k_2, c$ and the tags. The negation of the definition is also clear on this ( see the slides). In the TLS case, one entity can be malicious like the Facebook Message Franking. | |
| May 23, 2022 at 18:23 | vote | accept | Willi | ||
| May 23, 2022 at 11:08 | history | edited | Maarten Bodewes♦ | CC BY-SA 4.0 |
added 211 characters in body
|
| May 23, 2022 at 10:56 | history | answered | Maarten Bodewes♦ | CC BY-SA 4.0 |