arrow
Return

Sponge-Based Parallel Authenticated Encryption With Variable Tag Length and Side-Channel Protection

delete2023-01-01
delete1
delete
OA
AI
M
Mohamud Ahmed Jimale
N
Nor Aniza Abdullah
K
Kiah, Miss Laiha Binti Mat *
M
Mohd Yamani Idna Idris
M
Muhammad Reza Z’aba
N
Norziana Jamil
M
Mohd Saufy Rohmad
DOI:10.1109/ACCESS.2023.3267161delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Authenticated Encryption (AE) protects confidentiality and integrity at the same time. The sponge construction is based on an iterated permutation or transformation that can be used to implement hashing, and AE schemes, among others. Sponge-based AE schemes offer desirable characteristics like parallelizability and incrementality. In addition, they provide security features such as protection against Chosen Plaintext Attacks, Chosen-Ciphertext Attacks, and Side-Channel Attacks (SCAs). Traditionally AE schemes assume the tag length, also called the stretch, as a fixed parameter per key, and the security is proved according to that assumption. However, the variable tag length per key could happen due to misconfiguration or misuse. In that case, the security would be violated, so it is vital to accommodate variable tag length without sacrificing other desirable features. Reyhanitabar et al. proposed Key Equivalent Separation by Stretch feature and concretized it for protection against tag length misuse attacks in block cipher-based AE schemes. However, the problem remains unresolved for sponge-based constructions, where current sponge-based schemes are vulnerable to tag length variation under the same key attacks. This work aims to bridge this gap by proposing a parallel, sponge-based AE scheme with a variable tag length per key that protects against SCAs and suggesting a lower bound for the recommended tag length. Finally, the security of the proposed scheme is discussed, and its performance is analyzed after implementing the proposed AE scheme in the C programming language.
Keywords:
Authenticated encryption
integrity
message authentication code
nonce-based AE
parallel AE
privacy
side-channel attacks
sponge-based AE tag length
variable stretch

Journal

IEEE Access cover
IEEE Access
IF:
3.6
Papers:
9.8W
Citations:
29.4W

Organization

M
mimos berhad
Scholars:
108
Papers: 86
Citations: 2
U
Universiti Tenaga Nasional
Scholars:
2.1K
Papers: 1.9K
Citations: 3.5K
U
Universiti Teknologi MARA
Scholars:
5.7K
Papers: 4.1K
Citations: 4.8K
U
Universiti Malaya
Scholars:
2.1W
Papers: 1.8W
Citations: 182
researcher View more organizations