3.2 KB · ⇊ 2 parts · ⤓ Micron 3.2 KB · ⤓ HTML 49.9 KB

top

In cryptography, CWC Mode (Carter–Wegman + CTR mode) is an AEAD block cipher mode of operation that provides both encryption and built-in message integrity, similar to CCM and OCB modes. It combines the use of CTR mode with a 128-bit block cipher for encryption with an efficient polynomial Carter–Wegman MAC with a tag length of at most 128 bits and is designed by Tadayoshi Kohno, John Viega and Doug Whiting.cite-ref-spec-1-0[1]

CWC mode was submitted to NISTcite-ref-2[2] for standardization, but NIST opted for the similar GCM mode instead.cite-ref-3[3]

Although GCM has weaknesses compared to CWC,cite-ref-4[4] the GCM authors successfully argued for GCM.cite-ref-5[5]

CWC allows the payload and associated data to be at most 232 - 1 blocks or nearly 550 GB.cite-ref-spec-1-1[1]

• References

• External links

cite-note-spec-11. ↑ citerefkohnoviegawhiting2004Kohno, Tadayoshi; Viega, John; Whiting, Doug (2004). "CWC: A High-Performance Conventional Authenticated Encryption Mode". Fast Software Encryption. Lecture Notes in Computer Science. Vol. 3017. pp. 408–426. doi:10.1007/978-3-540-25937-4_26. ISBN 9783540259374.

cite-note-22. ↑ "NIST.gov - Computer Security Division - Computer Security Resource Center". August 30, 2017. Archived from the original on 2017-08-30.

cite-note-33. ↑ "Modes Development - Block Cipher Techniques | CSRC | CSRC". 4 January 2017.

cite-note-44. ↑ "Authentication weaknesses in GCM" (PDF). 2005-05-20.

cite-note-55. ↑ "GCM Update" (PDF). May 31, 2005.

• CWC mode home page

• CWC: A high-performance conventional authenticated encryption mode on Cryptology ePrint

• Implementation of CWC on top of AES.