TY - GEN
T1 - Revisiting the Security of COMET Authenticated Encryption Scheme
AU - Gueron, Shay
AU - Jha, Ashwin
AU - Nandi, Mridul
N1 - Publisher Copyright: © 2021, Springer Nature Switzerland AG.
PY - 2021
Y1 - 2021
N2 - COMETv1, by Gueron, Jha and Nandi, is a mode of operation for nonce-based authenticated encryption with associated data functionality. It was one of the second round candidates in the ongoing NIST Lightweight Cryptography Standardization Process. In this paper, we study a generalized version of COMETv1, that we call gCOMET, from provable security perspective. First, we present a comprehensive and complete security proof for gCOMET in the ideal cipher model. Second, we view COMET, the underlying mode of operation in COMETv1, as an instantiation of gCOMET, and derive its concrete security bounds. Finally, we propose another instantiation of gCOMET, dubbed COMETv2, and show that this version achieves better security guarantees as well as memory-efficient implementations as compared to COMETv1.
AB - COMETv1, by Gueron, Jha and Nandi, is a mode of operation for nonce-based authenticated encryption with associated data functionality. It was one of the second round candidates in the ongoing NIST Lightweight Cryptography Standardization Process. In this paper, we study a generalized version of COMETv1, that we call gCOMET, from provable security perspective. First, we present a comprehensive and complete security proof for gCOMET in the ideal cipher model. Second, we view COMET, the underlying mode of operation in COMETv1, as an instantiation of gCOMET, and derive its concrete security bounds. Finally, we propose another instantiation of gCOMET, dubbed COMETv2, and show that this version achieves better security guarantees as well as memory-efficient implementations as compared to COMETv1.
KW - AEAD
KW - COMET
KW - ICM
KW - Lightweight
KW - Provable security
KW - Rekeying
UR - http://www.scopus.com/inward/record.url?scp=85121920912&partnerID=8YFLogxK
U2 - 10.1007/978-3-030-92518-5_1
DO - 10.1007/978-3-030-92518-5_1
M3 - Conference contribution
SN - 9783030925178
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 3
EP - 25
BT - Progress in Cryptology – INDOCRYPT 2021 - 22nd International Conference on Cryptology in India, 2021, Proceedings
A2 - Adhikari, Avishek
A2 - Küsters, Ralf
A2 - Preneel, Bart
PB - Springer Science and Business Media Deutschland GmbH
T2 - 22nd International Conference on Cryptology in India, INDOCRYPT 2021
Y2 - 12 December 2021 through 15 December 2021
ER -