{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,10]],"date-time":"2026-08-10T12:31:52Z","timestamp":1786365112281,"version":"build-2736575974"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032354112","type":"print"},{"value":"9783032354129","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-35412-9_17","type":"book-chapter","created":{"date-parts":[[2026,8,10]],"date-time":"2026-08-10T12:00:35Z","timestamp":1786363235000},"page":"499-530","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Generic Committing Attacks"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-9761-1192","authenticated-orcid":false,"given":"Nilanjan","family":"Datta","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-8395-4925","authenticated-orcid":false,"given":"Hrithik","family":"Nandi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-0429-6944","authenticated-orcid":false,"given":"Soumit","family":"Pal","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1273-2394","authenticated-orcid":false,"given":"Yu","family":"Sasaki","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7738-2017","authenticated-orcid":false,"given":"Patrick","family":"Struck","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Maximiliane","family":"Weish\u00e4upl","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,8,11]]},"reference":[{"key":"17_CR1","unstructured":"Albertini, A., Duong, T., Gueron, S., K\u00f6lbl, S., Luykx, A., Schmieg, S.: How to abuse and fix authenticated encryption without key commitment. In: Butler, K.R.B., Thomas, K. (eds.) USENIX Security 2022, pp. 3291\u20133308. USENIX Association (2022). https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/albertini"},{"key":"17_CR2","unstructured":"Bao, Z., et al.: PHOTON-Beetle. Tech. rep., National Institute of Standards and Technology (2021). https:\/\/csrc.nist.gov\/projects\/lightweight-cryptography\/finalists"},{"key":"17_CR3","unstructured":"Beierle, C., et al.: Schwaemm and Esch. Tech. rep., National Institute of Standards and Technology (2021). https:\/\/csrc.nist.gov\/projects\/lightweight-cryptography\/finalists"},{"key":"17_CR4","doi-asserted-by":"publisher","unstructured":"Bellare, M., Hoang, V.T.: Efficient schemes for committing authenticated encryption. In: Dunkelman, O., Dziembowski, S. (eds.) EUROCRYPT\u00a02022, Part\u00a0II. LNCS, vol. 13276, pp. 845\u2013875. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-07085-3_29","DOI":"10.1007\/978-3-031-07085-3_29"},{"key":"17_CR5","doi-asserted-by":"publisher","unstructured":"Bellare, M., Hoang, V.T.: Succinctly-committing authenticated encryption. In: Reyzin, L., Stebila, D. (eds.) CRYPTO\u00a02024, Part\u00a0IV. LNCS, vol. 14923, pp. 305\u2013339. Springer, Cham (2024). https:\/\/doi.org\/10.1007\/978-3-031-68385-5_10","DOI":"10.1007\/978-3-031-68385-5_10"},{"key":"17_CR6","unstructured":"Bertoni, G., Daemen, J., Peeters, M., Van\u00a0Assche, G., Van\u00a0Keer, R.: Ketje v2. Tech. rep., Submission to the CAESAR Competition (2016). https:\/\/keccak.team\/files\/Ketjev2-doc2.0.pdf"},{"key":"17_CR7","unstructured":"Campagna, M., Maximov, A., Mattsson, J.P.: Galois Counter Mode with Secure Short Tags (GCM-SST) (2023). https:\/\/datatracker.ietf.org\/doc\/draft-mattsson-cfrg-aes-gcm-sst\/03\/"},{"key":"17_CR8","doi-asserted-by":"publisher","unstructured":"Chan, J., Rogaway, P., Atluri, V., Di Pietro, R., Jensen, C.D.: On committing authenticated-encryption. In: Meng, W. (ed.) ESORICS 2022, Part II. LNCS, vol. 13555, pp. 275\u2013294. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-17146-8_14","DOI":"10.1007\/978-3-031-17146-8_14"},{"key":"17_CR9","doi-asserted-by":"publisher","unstructured":"Chen, S., Karad\u017ei\u0107, V.: Committing authenticated encryption: Generic transforms with hash functions. In: Fehr, S., Fouque, P.A. (eds.) EUROCRYPT\u00a02025, Part\u00a0I. LNCS, vol. 15601, pp. 93\u2013123. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-91107-1_4","DOI":"10.1007\/978-3-031-91107-1_4"},{"key":"17_CR10","doi-asserted-by":"publisher","unstructured":"Chen, Y.L., et al.: Requirements for cryptographic accordions. Tech. Rep. NIST IR 8552, National Institute of Standards and Technology (2025). https:\/\/doi.org\/10.6028\/NIST.IR.8552","DOI":"10.6028\/NIST.IR.8552"},{"key":"17_CR11","unstructured":"Datta, N., Nandi, H., Pal, S., Sasaki, Y., Struck, P., Weish\u00e4upl, M.: Generic committing attacks: zero-padded ASCON is less secure than expected. Cryptology ePrint Archive (2026)"},{"key":"17_CR12","unstructured":"Dobraunig, C., et al.: ISAP. Tech. rep., National Institute of Standards and Technology (2021). https:\/\/csrc.nist.gov\/projects\/lightweight-cryptography\/finalists"},{"key":"17_CR13","unstructured":"Dobraunig, C., Eichlseder, M., Mendel, F., Schl\u00e4ffer, M.: Ascon. Tech. rep., National Institute of Standards and Technology (2021). https:\/\/csrc.nist.gov\/projects\/lightweight-cryptography\/finalists"},{"key":"17_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1007\/978-3-319-96884-1_6","volume-title":"Advances in Cryptology \u2013 CRYPTO 2018","author":"Y Dodis","year":"2018","unstructured":"Dodis, Y., Grubbs, P., Ristenpart, T., Woodage, J.: Fast message franking: from invisible salamanders to encryptment. In: Shacham, H., Boldyreva, A. (eds.) CRYPTO 2018. LNCS, vol. 10991, pp. 155\u2013186. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-96884-1_6"},{"key":"17_CR15","doi-asserted-by":"publisher","unstructured":"Dworkin, M.: Recommendation for block cipher modes of operation: the CCM mode for authentication and confidentiality. NIST Special Publication (SP) 800-38C SP 800-38C, National Institute of Standards and Technology, Gaithersburg, MD, USA (2007). https:\/\/doi.org\/10.6028\/NIST.SP.800-38C. https:\/\/nvlpubs.nist.gov\/nistpubs\/Legacy\/SP\/nistspecialpublication800-38c.pdf","DOI":"10.6028\/NIST.SP.800-38C"},{"key":"17_CR16","doi-asserted-by":"publisher","unstructured":"Farshim, P., Orlandi, C., Ro\u015fie, R.: Security of symmetric primitives under incorrect usage of keys. IACR Trans. Symm. Cryptol. 2017(1), 449\u2013473 (2017). https:\/\/doi.org\/10.13154\/tosc.v2017.i1.449-473","DOI":"10.13154\/tosc.v2017.i1.449-473"},{"key":"17_CR17","doi-asserted-by":"publisher","unstructured":"Kr\u00e4mer, J., Struck, P., Weish\u00e4upl, M.: Committing AE from sponges security analysis of the NIST LWC finalists. IACR Trans. Symm. Cryptol. 2024(4), 191\u2013248 (2024). https:\/\/doi.org\/10.46586\/tosc.v2024.i4.191-248","DOI":"10.46586\/tosc.v2024.i4.191-248"},{"key":"17_CR18","unstructured":"Len, J., Grubbs, P., Ristenpart, T.: Partitioning oracle attacks. In: Bailey, M., Greenstadt, R. (eds.) USENIX Security 2021, pp. 195\u2013212. USENIX Association (2021). https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/len"},{"key":"17_CR19","doi-asserted-by":"publisher","unstructured":"McGrew, D., Bailey, D.: AES-CCM Cipher Suites for Transport Layer Security (TLS). RFC 6655 (2012). https:\/\/doi.org\/10.17487\/RFC6655. https:\/\/www.rfc-editor.org\/info\/rfc6655","DOI":"10.17487\/RFC6655"},{"key":"17_CR20","doi-asserted-by":"publisher","unstructured":"Menda, S., Len, J., Grubbs, P., Ristenpart, T.: Context discovery and commitment attacks - how to break CCM, EAX, SIV, and more. In: Hazay, C., Stam, M. (eds.) EUROCRYPT 2023, Part IV. LNCS, vol. 14007, pp. 379\u2013407. Springer, Cham (2023). https:\/\/doi.org\/10.1007\/978-3-031-30634-1_13","DOI":"10.1007\/978-3-031-30634-1_13"},{"key":"17_CR21","doi-asserted-by":"publisher","unstructured":"Naito, Y., Sasaki, Y., Sugawara, T.: Committing security of ascon: cryptanalysis on primitive and proof on mode. IACR Trans. Symm. Cryptol. 2023(4), 420\u2013451 (2023). https:\/\/doi.org\/10.46586\/tosc.v2023.i4.420-451","DOI":"10.46586\/tosc.v2023.i4.420-451"},{"key":"17_CR22","unstructured":"Schulte-Geers, E., Waggoner, B.: Balls and bins\u2013simple concentration bounds (2022). https:\/\/arxiv.org\/abs\/2205.14494"},{"key":"17_CR23","doi-asserted-by":"publisher","unstructured":"Struck, P., Weish\u00e4upl, M.: Constructing committing and leakage-resilient authenticated encryption. IACR Trans. Symm. Cryptol. 2024(1), 497\u2013528 (2024). https:\/\/doi.org\/10.46586\/tosc.v2024.i1.497-528","DOI":"10.46586\/tosc.v2024.i1.497-528"},{"key":"17_CR24","doi-asserted-by":"publisher","unstructured":"Suzuki, K., Tonien, D., Kurosawa, K., Toyota, K.: Birthday paradox for multi-collisions. IEICE Trans. Fundam. Electron. Commun. Comput. Sci. 91-A(1), 39\u201345 (2008). https:\/\/doi.org\/10.1093\/IETFEC\/E91-A.1.39","DOI":"10.1093\/IETFEC\/E91-A.1.39"},{"key":"17_CR25","doi-asserted-by":"publisher","unstructured":"Turan, M.S., McKay, K., Kang, J., Kelsey, J., Chang, D.: Ascon-based lightweight cryptography standards for constrained devices: authenticated encryption, hash, and extendable output functions. NIST Special Publication (SP) 800-232 SP 800-232, National Institute of Standards and Technology, Gaithersburg, MD, USA (2025). https:\/\/doi.org\/10.6028\/NIST.SP.800-232","DOI":"10.6028\/NIST.SP.800-232"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 CRYPTO 2026"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-35412-9_17","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,10]],"date-time":"2026-08-10T12:00:37Z","timestamp":1786363237000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-35412-9_17"}},"subtitle":["Zero-Padded Ascon is Less Secure than Expected"],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032354112","9783032354129"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-35412-9_17","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"11 August 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CRYPTO","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Annual International Cryptology Conference","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Santa Barbara, CA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 August 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 August 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"46","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"crypto2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/crypto.iacr.org\/2026\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}