6 ms·
The plan for online authenticated encryption in Miscreant is to support Rogaway's CHAIN and STREAM constructions: STREAM: https://github.com/miscreant/miscrean
by bascule 9y ago
The plan for online authenticated encryption in Miscreant is to support Rogaway's CHAIN and STREAM constructions:
STREAM: https://github.com/miscreant/miscreant/issues/32 https://github.com/miscreant/miscreant/issues/32
CHAIN: https://github.com/miscreant/miscreant/issues/33 https://github.com/miscreant/miscreant/issues/33
These schemes achieve a security definition called OAE2 (STREAM specifically achieves nOAE, which Rogaway proves equivalent to OAE2) and are robust against reordering and truncation attacks. For more information, please see the paper:
http://web.cs.ucdavis.edu/~rogaway/papers/oae.pdf http://web.cs.ucdavis.edu/~rogaway/papers/oae.pdf
- swordswinger12 9y agoAh, thanks for the reply Tony. This would indeed prevent the problem I described. Kinda curious about the downvotes, since tptacek's original comment suggested nothing like CHAIN or STREAM, but on crypto HN you gotta roll with the punches.