Chaskey is never claimed to be a cipher.

hutorny / chaskey

A lightweight 128-bit encryption algorithm implemented in C++ and JavaScript

MIT License

14 stars 8 forks source link

Chaskey is never claimed to be a cipher. #2

Open funny-falcon-at-joomcode opened 4 years ago

funny-falcon-at-joomcode commented 4 years ago

While Chaskey is it self constructed as CMAC/OMAC with EvanMansour block cipher, afaik it was never claimed its building block (EM block cipher) is safe to be used as standalone building block for encryption. More over, cryptoanalyzes have sentences about "attaker has no way for chosen ciphertext attack".

May be I'm missing something? Can you point on investigations?

hutorny commented 4 years ago

Yes, you right. Chaskey is a MAC algorithm and using its block cipher for other encryption modes is a trade-off for the applications that cannot afford standard encryption algorithms