Timeline for Can one make a secure AEAD from any secure cipher and any secure MAC?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 18, 2016 at 17:12 | comment | added | Demi | My plan is to adapt the proof of ChaCha20-Poly1305. | |
| May 18, 2016 at 4:24 | comment | added | Yehuda Lindell | Indeed, my intuition goes with you and I agree that if there is any justice in the world then this would be secure. However, I have long ago given up on a just world. I would not be satisfied until a full proof is given (in a rigorous model, where the adversary has enc/dec oracles and so on), with a full reduction and so on. But, I strongly encourage you to do that! | |
| May 17, 2016 at 22:27 | comment | added | Demi | @YehudaLindell My edit includes a proof (albeit purely qualitative) | |
| May 16, 2016 at 19:04 | comment | added | Yehuda Lindell | I do not know of a generic proof of composition in such a case. It's worth trying to write one. | |
| May 16, 2016 at 14:44 | comment | added | Demi | I edited to mention that I did mean to use the stream cipher to mask the MAC for the MACs that require it. | |
| May 16, 2016 at 10:15 | history | edited | Maarten Bodewes♦ | CC BY-SA 3.0 |
split in too, highlighting that the second part is about MAC-then-encrypt
|
| May 16, 2016 at 6:05 | history | edited | Yehuda Lindell | CC BY-SA 3.0 |
added 850 characters in body
|
| May 16, 2016 at 2:25 | comment | added | puzzlepalace | This paper may be of interest. | |
| May 15, 2016 at 20:56 | history | answered | Yehuda Lindell | CC BY-SA 3.0 |