Community hub
Recent from talks
Contribute something
Nothing was collected or created yet.
CWC mode
View on Wikipedia | This article needs additional citations for verification. (April 2019) |
In cryptography, CWC Mode (Carter–Wegman + CTR mode) is an AEAD block cipher mode of operation that provides both encryption and built-in message integrity, similar to CCM and OCB modes. It combines the use of CTR mode with a 128-bit block cipher for encryption with an efficient polynomial Carter–Wegman MAC with a tag length of at most 128 bits and is designed by Tadayoshi Kohno, John Viega and Doug Whiting.[1]
CWC mode was submitted to NIST[2] for standardization, but NIST opted for the similar GCM mode instead.[3]
Although GCM has weaknesses compared to CWC,[4] the GCM authors successfully argued for GCM.[5]
CWC allows the payload and associated data to be at most 232 - 1 blocks or nearly 550 GB.[1]
References
[edit]- ^ a b Kohno, Tadayoshi; Viega, John; Whiting, Doug (2004). "CWC: A High-Performance Conventional Authenticated Encryption Mode". Fast Software Encryption. Lecture Notes in Computer Science. Vol. 3017. pp. 408–426. doi:10.1007/978-3-540-25937-4_26. ISBN 9783540259374.
- ^ "NIST.gov - Computer Security Division - Computer Security Resource Center". August 30, 2017. Archived from the original on 2017-08-30.
- ^ "Modes Development - Block Cipher Techniques | CSRC | CSRC". 4 January 2017.
- ^ "Authentication weaknesses in GCM" (PDF). 2005-05-20.
- ^ "GCM Update" (PDF). May 31, 2005.
External links
[edit]- CWC mode home page
- CWC: A high-performance conventional authenticated encryption mode on Cryptology ePrint
- Implementation of CWC on top of AES.
 | This cryptography-related article is a stub. You can help Wikipedia by expanding it. |