CCM Mode

[Paul Crowley]

"Housley, Russ" <rhousley at rsasecurity.com> writes:
> It contains a specification for an authenticated encryption mode.

Note that this mode is simply the combination of CTR and CBC-MAC,
though of course it's valuable to have a team of experienced
cryptographers give a precise specification of a good way of composing
them.  Some commentary by Rogaway can be found here:

http://www.cs.ucdavis.edu/~rogaway/ocb/links.htm

all of his technical commentary seems indisputable, though of course I
would favour choosing less efficient modes over patent-encumbered
modes.
-- 
  __  Paul Crowley
\/ o\ sig at paul.ciphergoth.org
/\__/ http://www.ciphergoth.org/

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com