Authentication Failures in NIST version of GCM

First Page		Document Content
Date: 2012-08-01 13:04:44 Authenticated encryption Initialization vector Block cipher Ciphertext Cryptographic hash function Keystream Stream cipher Cipher Chosen-ciphertext attack Cryptography Block cipher modes of operation Galois/Counter Mode		Authentication Failures in NIST version of GCM Add to Reading List Source URL: csrc.nist.gov Download Document from Source Website File Size: 147,79 KB Share Document on Facebook

	Influence of first two keystream bytes 2−7 Bias 1 Bias 3 Bias 5 DocID: 1xV86 - View Document
	Keystream distribution at byte DocID: 1xTZC - View Document
	Probability of keystream value DocID: 1xTVG - View Document
	Fluhrer−McGrew biases in initial keystream bytes 2−6.5 (0, 0) (0, 1) (0,i+1) DocID: 1xTHJ - View Document
	Biases in the RC4 keystream (128 bit uniform keys) Nadhem AlFardan and Dan Bernstein and Kenny Paterson and Bertram Poettering and Jacob Schuldt Royal Holloway, University of London University of Illinois at Chicago DocID: 1tSaM - View Document