ChaCha20Poly1305 multi-key bounds

cfrg / draft-irtf-cfrg-aead-limits

Usage Limits on AEAD Algorithms

Other

7 stars 6 forks source link

Closed fxguenther closed 2 years ago

fxguenther commented 2 years ago

Added multi-key bounds from https://doi.org/10.1145/3460120.3484814 (CCS 2021).

ChaCha20Poly1305 has multi-key AE and integrity limit identical to single-user case (just that v is counted across all keys), multi-key confdentiality limit is bounded at very low levels
multi-key GCM bound improved: the above work shows that the constant additive 2^-48 term can be waived without further side-effects on the dominant terms
added multi-key examples (table)

chris-wood commented 2 years ago

Merging as-is. We can address simplifications in followup work.