GCM security bounds reconsidered
From MaRDI portal
Recommendations
- Breaking and repairing GCM security proofs
- The security and performance of the Galois/counter mode (GCM) of operation
- The Security and Performance of “GCM” when Short Multiplications Are Used Instead
- Authentication key recovery on Galois/counter mode (GCM)
- Cycling attacks on GCM, GHASH and other polynomial MACs and hashes
Cited in
(9)- Optimal forgeries against polynomial-based MACs and GCM
- Authentication key recovery on Galois/counter mode (GCM)
- Authenticated encryption with small stretch (or, how to accelerate AERO)
- The multi-user security of authenticated encryption: AES-GCM in TLS 1.3
- Breaking and repairing GCM security proofs
- XOCB: beyond-birthday-bound secure authenticated encryption mode with rate-one computation
- How fast can SM4 be in software?
- Making GCM great again: toward full security and longer nonces
- Comprehensive robustness analysis of GCM, CCM, and OCB3
This page was built for publication: GCM security bounds reconsidered
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2946953)