International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

FEDT: Forkcipher-based Leakage-resilient Beyond-birthday-secure AE

Authors:
Nilanjan Datta , Institute for Advancing Intelligence, TCG CREST
Avijit Dutta , Institute for Advancing Intelligence, TCG CREST
Eik List , Independent Researcher
Sougata Mandal , Institute for Advancing Intelligence, TCG CREST, Ramakrishna Mission Vivekananda Educational and Research Institute
Download:
DOI: 10.62056/akgyl86bm
URL: https://cic.iacr.org//p/1/2/21
Search ePrint
Search Google
Abstract:

There has been a notable surge of research on leakage-resilient authenticated encryption (AE) schemes, in the bounded as well as the unbounded leakage model. The latter has garnered significant attention due to its detailed and practical orientation. Designers have commonly utilized (tweakable) block ciphers, exemplified by the TEDT scheme, achieving $\mathcal{O}(n-\log(n^2))$-bit integrity under leakage and comparable AE security in the black-box setting. However, the privacy of TEDT was limited by $n/2$-bits under leakage; TEDT2 sought to overcome these limitations by achieving improved security with $\mathcal{O}(n-\log n)$-bit integrity and privacy under leakage.

This work introduces FEDT, an efficient leakage-resilient authenticated encryption (AE) scheme based on fork-cipher. Compared to the state-of-the-art schemes TEDT and TEDT2, which process messages with a rate of $1/2$ block per primitive call for encryption and one for authentication, FEDT doubles their rates at the price of a different primitive. FEDT employs a more parallelizable tree-based encryption compared to its predecessors while maintaining $\mathcal{O}(n-\log n)$-bit security for both privacy and integrity under leakage. FEDT prioritizes high throughput at the cost of increased latency. For settings where latency is important, we propose FEDT*, which combines the authentication part of FEDT with a CTR-based encryption. FEDT* offers security equivalent to FEDT while increasing the encryption rate of $4/3$ and reducing the latency.

BibTeX
@article{cic-2024-34414,
  title={FEDT: Forkcipher-based Leakage-resilient Beyond-birthday-secure AE},
  journal={cic},
  publisher={International Association for Cryptologic Research},
  volume={1, Issue 2},
  url={https://cic.iacr.org//p/1/2/21},
  doi={10.62056/akgyl86bm},
  author={Nilanjan Datta and Avijit Dutta and Eik List and Sougata Mandal},
  year=2024
}