Duplexing the Sponge: Single-Pass Authenticated Encryption and Other Applications

摘要: This paper proposes a novel construction, called duplex, closely related to the sponge that accepts message blocks be hashed and---at no extra cost---provides digests on input received so far. It can proven equivalent cascade of functions and hence inherits its security against single-stage generic attacks. The main application proposed here is an authenticated encryption mode based duplex construction. efficient, namely, enciphering authenticating together require only single call underlying permutation per block, readily usable in, e.g., key wrapping. Furthermore, it first this kind directly instead block cipher natively support intermediate tags. construction used efficiently realize other modes, such as reseedable pseudo-random bit sequence generators variant overwrites part state with rather than XOR in.