{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,10]],"date-time":"2026-08-10T12:31:49Z","timestamp":1786365109165,"version":"build-2736575974"},"publisher-location":"Cham","reference-count":36,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032354112","type":"print"},{"value":"9783032354129","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-35412-9_4","type":"book-chapter","created":{"date-parts":[[2026,8,10]],"date-time":"2026-08-10T12:00:24Z","timestamp":1786363224000},"page":"98-130","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Key Committing Security of\u00a0HCTR2, Revisited"],"prefix":"10.1007","author":[{"given":"Donghoon","family":"Chang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yu Long","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yukihito","family":"Hiraga","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kazuhiko","family":"Minematsu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nicky","family":"Mouha","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yusuke","family":"Naito","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yu","family":"Sasaki","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Takeshi","family":"Sugawara","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,8,11]]},"reference":[{"key":"4_CR1","unstructured":"3GPP TS 33 501: Security architecture and procedures for 5G System. https:\/\/portal.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.aspx?specificationId=3169 (2024)"},{"key":"4_CR2","unstructured":"Albertini, A., Duong, T., Gueron, S., K\u00f6lbl, S., Luykx, A., Schmieg, S.: How to abuse and fix authenticated encryption without key commitment. In: Butler, K.R.B., Thomas, K. (eds.) USENIX Security 2022, pp. 3291\u20133308. USENIX Association (2022). https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/albertini"},{"key":"4_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"105","DOI":"10.1007\/978-3-662-45611-8_6","volume-title":"Advances in Cryptology \u2013 ASIACRYPT 2014","author":"E Andreeva","year":"2014","unstructured":"Andreeva, E., Bogdanov, A., Luykx, A., Mennink, B., Mouha, N., Yasuda, K.: How to Securely Release Unverified Plaintext in Authenticated Encryption. In: Sarkar, P., Iwata, T. (eds.) ASIACRYPT 2014. LNCS, vol. 8873, pp. 105\u2013125. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-662-45611-8_6"},{"key":"4_CR4","unstructured":"Android Open Source Project: File-based encryption (2023). https:\/\/source.android.com\/docs\/security\/features\/encryption\/file-based"},{"key":"4_CR5","unstructured":"AWS Key Management Service: AWS KMS concepts. https:\/\/docs.aws.amazon.com\/kms\/latest\/developerguide\/concepts.html, Accessed on 12 Feb 2026"},{"key":"4_CR6","doi-asserted-by":"publisher","unstructured":"Bellare, M., Hoang, V.T.: Efficient schemes for committing authenticated encryption. In: Dunkelman, O., Dziembowski, S. (eds.) EUROCRYPT\u00a02022, Part\u00a0II. LNCS, vol. 13276, pp. 845\u2013875. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-07085-3_29","DOI":"10.1007\/978-3-031-07085-3_29"},{"key":"4_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"317","DOI":"10.1007\/3-540-44448-3_24","volume-title":"Advances in Cryptology \u2014 ASIACRYPT 2000","author":"M Bellare","year":"2000","unstructured":"Bellare, M., Rogaway, P.: Encode-Then-Encipher Encryption: How to Exploit Nonces or Redundancy in Plaintexts for Efficient Cryptography. In: Okamoto, T. (ed.) ASIACRYPT 2000. LNCS, vol. 1976, pp. 317\u2013330. Springer, Heidelberg (2000). https:\/\/doi.org\/10.1007\/3-540-44448-3_24"},{"key":"4_CR8","unstructured":"Campagna, M., Maximov, A., Mattsson, J.P.: Galois Counter Mode with Secure Short Tags (GCM-SST), draft-mattsson-cfrg-aes-gcm-sst-18. https:\/\/datatracker.ietf.org\/doc\/draft-mattsson-cfrg-aes-gcm-sst\/18\/"},{"key":"4_CR9","unstructured":"Chang, D., et al.: Key Committing Security of HCTR2, Revisited. In: IACR Cryptol. ePrint Arch. 2026, \u00a0254 (2026). https:\/\/eprint.iacr.org\/2026\/254"},{"key":"4_CR10","doi-asserted-by":"publisher","unstructured":"Chen, Y.L., et al.: Requirements for cryptographic accordions. NIST Interagency Rep. (NIST IR) 8552 (2025). https:\/\/doi.org\/10.6028\/NIST.IR.8552","DOI":"10.6028\/NIST.IR.8552"},{"key":"4_CR11","doi-asserted-by":"publisher","unstructured":"Chen, Y.L., et al.: Key committing security of AEZ and more. IACR Trans. Symm. Cryptol. 2023(4), 452\u2013488 (2023). https:\/\/doi.org\/10.46586\/tosc.v2023.i4.452-488","DOI":"10.46586\/tosc.v2023.i4.452-488"},{"key":"4_CR12","doi-asserted-by":"publisher","unstructured":"Crowley, P., Biggers, E.: Adiantum: length-preserving encryption for entry-level processors. IACR Trans. Symm. Cryptol. 2018(4), 39\u201361 (2018). https:\/\/doi.org\/10.13154\/tosc.v2018.i4.39-61","DOI":"10.13154\/tosc.v2018.i4.39-61"},{"key":"4_CR13","unstructured":"Crowley, P., Huckleberry, N., Biggers, E.: Length-preserving encryption with HCTR2. Cryptology ePrint Archive, Report 2021\/1441 (2021). https:\/\/eprint.iacr.org\/2021\/1441"},{"key":"4_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1007\/978-3-319-96884-1_6","volume-title":"Advances in Cryptology \u2013 CRYPTO 2018","author":"Y Dodis","year":"2018","unstructured":"Dodis, Y., Grubbs, P., Ristenpart, T., Woodage, J.: Fast Message Franking: From Invisible Salamanders to Encryptment. In: Shacham, H., Boldyreva, A. (eds.) CRYPTO 2018. LNCS, vol. 10991, pp. 155\u2013186. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-96884-1_6"},{"key":"4_CR15","doi-asserted-by":"crossref","unstructured":"Dworkin, M.: NIST Special Publication 800-38C: Recommendation for block cipher modes of operation: the CCM mode for authentication and confidentiality (2007). https:\/\/csrc.nist.gov\/pubs\/sp\/800\/38\/c\/upd1\/final","DOI":"10.6028\/NIST.SP.800-38c"},{"key":"4_CR16","doi-asserted-by":"crossref","unstructured":"Dworkin, M.: NIST Special Publication 800-38D: Recommendation for block cipher modes of operation: Galois\/counter mode (GCM) and GMAC (2007). https:\/\/csrc.nist.gov\/pubs\/sp\/800\/38\/d\/final","DOI":"10.6028\/NIST.SP.800-38d"},{"key":"4_CR17","doi-asserted-by":"publisher","unstructured":"Farshim, P., Orlandi, C., Ro\u015fie, R.: Security of symmetric primitives under incorrect usage of keys. IACR Trans. Symm. Cryptol. 2017(1), 449\u2013473 (2017). https:\/\/doi.org\/10.13154\/tosc.v2017.i1.449-473","DOI":"10.13154\/tosc.v2017.i1.449-473"},{"key":"4_CR18","unstructured":"Google: HCTR2 specification and test vectors. https:\/\/github.com\/google\/hctr2, Accessed 24 Sep 2025"},{"key":"4_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"66","DOI":"10.1007\/978-3-319-63697-9_3","volume-title":"Advances in Cryptology \u2013 CRYPTO 2017","author":"P Grubbs","year":"2017","unstructured":"Grubbs, P., Lu, J., Ristenpart, T.: Message Franking via Committing Authenticated Encryption. In: Katz, J., Shacham, H. (eds.) CRYPTO 2017. LNCS, vol. 10403, pp. 66\u201397. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-63697-9_3"},{"key":"4_CR20","unstructured":"Gueron, S.: Intel advanced encryption standard (AES) new instructions set (2010)"},{"key":"4_CR21","unstructured":"Gueron, S., Kounavis, M.E.: Intel carry-less multiplication instruction and its usage for computing the GCM mode (2014)"},{"key":"4_CR22","unstructured":"Gueron, S., Langley, A., Lindell, Y.: AES-GCM-SIV: Specification and analysis. Cryptology ePrint Archive, Paper 2017\/168 (2017). https:\/\/eprint.iacr.org\/2017\/168"},{"key":"4_CR23","doi-asserted-by":"publisher","unstructured":"Gueron, S., Langley, A., Lindell, Y.: AES-GCM-SIV: nonce misuse-resistant authenticated encryption. RFC 8452, 1\u201342 (2019). https:\/\/doi.org\/10.17487\/RFC8452, https:\/\/doi.org\/10.17487\/RFC8452","DOI":"10.17487\/RFC8452"},{"key":"4_CR24","unstructured":"Hirose, S., Minematsu, K.: Envelope encryption in the symmetric-key setting: A formalization and generic constructions. Cryptology ePrint Archive, Paper 2023\/1727 (2023). https:\/\/eprint.iacr.org\/2023\/1727"},{"key":"4_CR25","doi-asserted-by":"publisher","unstructured":"Hirose, S., Minematsu, K.: A formal treatment of envelope encryption. In: Kim, J., Park, J., Lee, W. (eds.) ICISC 2024. LNCS, vol. 15596, pp. 96\u2013110. Springer, Cham (2024). https:\/\/doi.org\/10.1007\/978-981-96-5566-3_6","DOI":"10.1007\/978-981-96-5566-3_6"},{"key":"4_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1007\/978-3-662-46800-5_2","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2015","author":"VT Hoang","year":"2015","unstructured":"Hoang, V.T., Krovetz, T., Rogaway, P.: Robust Authenticated-Encryption AEZ and the Problem That It Solves. In: Oswald, E., Fischlin, M. (eds.) EUROCRYPT 2015. LNCS, vol. 9056, pp. 15\u201344. Springer, Heidelberg (2015). https:\/\/doi.org\/10.1007\/978-3-662-46800-5_2"},{"key":"4_CR27","doi-asserted-by":"publisher","unstructured":"Hoang, V.T., Menda, S.: Robust AE With Committing Security. In: Chung, K.M., Sasaki, Y. (eds.) Advances in Cryptology \u2013 ASIACRYPT 2024. ASIACRYPT 2024. Lecture Notes in Computer Science, vol. 15492. Springer, Cham (2025). https:\/\/doi.org\/10.1007\/978-981-96-0947-5_11","DOI":"10.1007\/978-981-96-0947-5_11"},{"key":"4_CR28","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"127","DOI":"10.1007\/978-3-030-88428-4_7","volume-title":"Computer Security \u2013 ESORICS 2021","author":"T Isobe","year":"2021","unstructured":"Isobe, T., Ito, R., Minematsu, K.: Security Analysis of SFrame. In: Bertino, E., Shulman, H., Waidner, M. (eds.) ESORICS 2021. LNCS, vol. 12973, pp. 127\u2013146. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-88428-4_7"},{"key":"4_CR29","unstructured":"Knuth, D.E.: The art of computer programming, volume 2 (3rd ed.): Seminumerical Algorithms. Addison-Wesley Longman Publishing Co., Inc., USA (1997)"},{"key":"4_CR30","unstructured":"Len, J., Grubbs, P., Ristenpart, T.: Partitioning oracle attacks. In: Bailey, M., Greenstadt, R. (eds.) USENIX Security 2021, pp. 195\u2013212. USENIX Association (2021). https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/len"},{"key":"4_CR31","doi-asserted-by":"publisher","unstructured":"Menda, S., Len, J., Grubbs, P., Ristenpart, T.: Context discovery and commitment attacks - how to break CCM, EAX, SIV, and more. In: Hazay, C., Stam, M. (eds.) EUROCRYPT\u00a02023, Part\u00a0IV. LNCS, vol. 14007, pp. 379\u2013407. Springer, Cham (Apr 2023). https:\/\/doi.org\/10.1007\/978-3-031-30634-1_13","DOI":"10.1007\/978-3-031-30634-1_13"},{"key":"4_CR32","doi-asserted-by":"publisher","unstructured":"Naito, Y., Sasaki, Y., Takeshi, T.: Committing wide encryption mode with minimum ciphertext expansion. IACR Trans. Symm. Cryptol. 2025(1), 44\u201369 (2025). https:\/\/doi.org\/10.46586\/tosc.v2025.i1.44-69","DOI":"10.46586\/tosc.v2025.i1.44-69"},{"key":"4_CR33","unstructured":"National Institute of Standards and Technology: NIST launches development of cryptographic accordions (2025). https:\/\/csrc.nist.gov\/News\/2025\/nist-launches-development-cryptographic-accordions"},{"key":"4_CR34","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"373","DOI":"10.1007\/11761679_23","volume-title":"Advances in Cryptology - EUROCRYPT 2006","author":"P Rogaway","year":"2006","unstructured":"Rogaway, P., Shrimpton, T.: A Provable-Security Treatment of the Key-Wrap Problem. In: Vaudenay, S. (ed.) EUROCRYPT 2006. LNCS, vol. 4004, pp. 373\u2013390. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11761679_23"},{"key":"4_CR35","unstructured":"The Linux Kernel: hctr2.c. https:\/\/github.com\/torvalds\/linux\/blob\/master\/crypto\/hctr2.c, Accessed 15 May 2025"},{"key":"4_CR36","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"175","DOI":"10.1007\/11599548_15","volume-title":"Information Security and Cryptology","author":"P Wang","year":"2005","unstructured":"Wang, P., Feng, D., Wu, W.: HCTR: A Variable-Input-Length Enciphering Mode. In: Feng, D., Lin, D., Yung, M. (eds.) CISC 2005. LNCS, vol. 3822, pp. 175\u2013188. Springer, Heidelberg (2005). https:\/\/doi.org\/10.1007\/11599548_15"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 CRYPTO 2026"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-35412-9_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,10]],"date-time":"2026-08-10T12:00:28Z","timestamp":1786363228000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-35412-9_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032354112","9783032354129"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-35412-9_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"11 August 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CRYPTO","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Annual International Cryptology Conference","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Santa Barbara, CA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 August 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 August 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"46","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"crypto2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/crypto.iacr.org\/2026\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}