Authenticated encryption: how reordering can impact performance

Abstract

Abstract. In this work, we look at authenticated encryption schemes from a new perspective. As opposed to focusing solely on the "security" implications of the different methods for constructing authenticated encryption schemes, we investigate the effect of the method used to construct an authenticated encryption scheme on the "performance" of the construction. We show that, as opposed to the current NIST standard, by performing the authentication operation before the encryption operation, the computational efficiency of the construction can be increased, without affecting the security of the overall construction. In fact, we show that the proposed construction is even more secure than standard authentication based on universal hashing in the sense that the hashing key is resilient to key recovery attacks.

A new algorithm for implementing message authentication and integrity in software implementations

“…Depend on the workshops; NIST suggested more than one additional algorithm by generic competition. And NIST suggested a timetable for testing and published new using policy of the Hash functions [8,9].…”