2

CAESAR competition did not result in any standard. I think it is because AES-GCM is already widely adopted (with hardware support, although some CAESAR algorithms also use AES) and CAESAR didn't bring anything significantly new. For example OCB was known before, but it is not widely adopted because it is patented (seems like patents have expired now). I ...


1

AES-GCM falls category A5 in the paper. In AES-GCM doesn't support $\texttt{no-AAD}$, even you don't use AAD during encryption, AES-GCM convert his as a $\texttt{zero-length-AAD}$. See in the NIST Special Publication 800-38d, page 15; Algorithm 4: $GCM-AE_K (IV, P, A)$ … 4. Let $u = 128\cdot\lceil\operatorname{len}(C)/128\rceil - \operatorname{len}(C)$ and ...


Only top voted, non community-wiki answers of a minimum length are eligible