Two of the CAESAR finalists use XEX and EME mode of operations (COLM uses EME, OCB uses XEX).

I did literature to summarize the main advantages / disadvantages but I could not find much. My question is the following:
What are the main advantages/ limitations of both?

  • $\begingroup$ Please make a separate question to compare ACORN against ChaCha-Poly. I have also removed the off-topic implementation request (which a short search should answer anyways). $\endgroup$ – SEJPM Jul 5 '18 at 8:47
  • $\begingroup$ XEX and EME are completely different. The former is a tweakable narrow block cipher, the latter is a wide block cipher. Put simply, XEX is faster but more malleable. EME is twice as slow but not very malleable. Note that neither are authenticated modes of encryption. $\endgroup$ – forest Jul 5 '18 at 10:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.