Are there any online, single pass, AE with associated data auth?

Question

AE comparison summarizes features of nine AE ciphers and none of them combine features online, one pass, AD auth (see table below). Are out there such ciphers or such combination was proved to be unsecure?

Single-pass vs two-pass is a rather arbitrary distinction. – CodesInChaos May 29 '17 at 11:05 — CodesInChaos, May 29 '17 at 11:05

score 5 · Answer 1 · edited May 29 '17 at 14:22

The comparison table is old. OCB has been updated twice since it was first published, supporting associated data since the Asiacrypt 2004 paper. The latest version is OCB3 (but Rogaway suggests it should be called OCB) from a FSE 2011 paper. See http://web.cs.ucdavis.edu/~rogaway/ocb/ocb-faq.htm#versions

In summary, OCB (versions OCB2 and later) supports AEAD and has supported it since 2004.

score 3 · Accepted Answer · answered May 29 '17 at 10:07

3

The SpongeWrap scheme, which is an AEAD based on the duplex sponge construction satisfies all your criterias.

answered May 29 '17 at 10:07

mat

2,508
12
28

Are there any online, single pass, AE with associated data auth?

2 Answers2