AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 42
Abstract: This memo specifies two authenticated encryption algorithms that are nonce misuse resistant -- that is, they do not fail catastrophically if a nonce is repeated. This document is the product of the Crypto Forum Research Group.
Publication Date: 2019-04-01
Status Note: Informational
DOI: 10.17487/RFC8452
Link: https://doi.org/10.17487/RFC8452
Author(s): Shay Gueron
Adam Langley
Yehuda Lindell
Keyword(s): Authenticated Encryption, AEAD, AES-GCM

Latest version of IETF RFC 8452

Document Versions — IETF RFC 8452

▶ IETF RFC 8452 (2019-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

NIST SP 800-38A [Active, Amended]
IETF RFC 2119 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

10.1007-978-3-319-78381-9_18 — BHT18 EXTERNAL
10.1007-11927587_5 — multi-birthday EXTERNAL
10.1145-2810103.2813613 — GCM-SIV EXTERNAL
10.1145-3133956.3133992 — key-derive EXTERNAL
NIST.SP.800-38D — GCM EXTERNAL
Gueron, S., Langley, A., and Y. Lindell, "Webpage for the AES-GCM-SIV Mode of Operation", < https://cyber.biu.ac.il/aes-gcm-siv/ >. EXTERNAL
Gueron, S., Langley, A., and Y. Lindell, "AES-GCM-SIV: Specification and Analysis", July 2017, < https://eprint.iacr.org/2017/168 >. EXTERNAL
Bleichenbacher, D., "Subject: AES-GCM-SIV security of the additional data", message to the cfrg mailing list, 24 June 2016, < https://mailarchive.ietf.org/arch/msg/cfrg/ qgh-Yxmj7CC7cq2YZLpmfGA3x-o >. EXTERNAL
IETF RFC 3610 [Active*]
IETF RFC 5116 [Active*]
IETF RFC 5297 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8452.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8452, AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption. Available at https://doi.org/10.17487/RFC8452

Snippet:

IETF RFC 8452, AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption. Available at https://doi.org/10.17487/RFC8452

HTML (ISO 690 compliant)

Preview:

IETF RFC 8452, AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption. Available at https://doi.org/10.17487/RFC8452

Snippet:

<span class="citation"><cite>IETF RFC 8452</cite>, AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption. Available at <a href="https://doi.org/10.17487/RFC8452" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8452</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8452, AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption
doi: 10.17487/RFC8452
url: https://doi.org/10.17487/RFC8452

Snippet:

<li>
<cite id="bib-rfc8452">IETF RFC 8452</cite>, AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption
<span class="doi">10.17487/RFC8452</span>
</li>

Referenced By

IETF RFC 9325 [Active*]