{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,7]],"date-time":"2025-12-07T12:00:42Z","timestamp":1765108842332,"version":"3.46.0"},"publisher-location":"Singapore","reference-count":37,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819550173","type":"print"},{"value":"9789819550180","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-95-5018-0_1","type":"book-chapter","created":{"date-parts":[[2025,12,7]],"date-time":"2025-12-07T11:57:01Z","timestamp":1765108621000},"page":"3-34","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Beyond-Birthday-Bound Security with\u00a0HCTR2: Cascaded Construction and\u00a0Tweak-Based Key Derivation"],"prefix":"10.1007","author":[{"given":"Yu Long","family":"Chen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yukihito","family":"Hiraga","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nicky","family":"Mouha","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yusuke","family":"Naito","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Sasaki","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Takeshi","family":"Sugawara","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,12,8]]},"reference":[{"key":"1_CR1","unstructured":"Amazon Web Services, Inc.: Amazon EC2 instance types. https:\/\/aws.amazon.com\/ec2\/instance-types\/ (2024)"},{"key":"1_CR2","unstructured":"Android Open Source Project: File-based encryption. https:\/\/source.android.com\/docs\/security\/features\/encryption\/file-based (2023)"},{"key":"1_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"317","DOI":"10.1007\/3-540-44448-3_24","volume-title":"Advances in Cryptology \u2014 ASIACRYPT 2000","author":"M Bellare","year":"2000","unstructured":"Bellare, M., Rogaway, P.: Encode-then-encipher encryption: how to exploit nonces or redundancy in plaintexts for efficient cryptography. In: Okamoto, T. (ed.) ASIACRYPT 2000. LNCS, vol. 1976, pp. 317\u2013330. Springer, Heidelberg (2000). https:\/\/doi.org\/10.1007\/3-540-44448-3_24"},{"key":"1_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"287","DOI":"10.1007\/11941378_21","volume-title":"Progress in Cryptology - INDOCRYPT 2006","author":"D Chakraborty","year":"2006","unstructured":"Chakraborty, D., Sarkar, P.: HCH: a new tweakable enciphering scheme using the hash-encrypt-hash approach. In: Barua, R., Lange, T. (eds.) INDOCRYPT 2006. LNCS, vol. 4329, pp. 287\u2013302. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11941378_21"},{"key":"1_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"327","DOI":"10.1007\/978-3-642-55220-5_19","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2014","author":"S Chen","year":"2014","unstructured":"Chen, S., Steinberger, J.: Tight security bounds for key-alternating ciphers. In: Nguyen, P.Q., Oswald, E. (eds.) EUROCRYPT 2014. LNCS, vol. 8441, pp. 327\u2013350. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-642-55220-5_19"},{"key":"1_CR6","unstructured":"Chen, Y.L., et al.: Requirements for Cryptographic Accordions. NIST Interagency Report, NIST IR 8552 (2025). https:\/\/csrc.nist.gov\/pubs\/ir\/8552\/final"},{"key":"1_CR7","unstructured":"Crowley, P., Huckleberry, N., Biggers, E.: Length-preserving encryption with HCTR2. IACR Cryptol. ePrint Arch. (2021). https:\/\/eprint.iacr.org\/2021\/1441"},{"key":"1_CR8","unstructured":"Datta, N., Dutta, A., Ghosh, S., Nandi, H.: Optimally secure TBC based accordion mode. Cryptology ePrint Archive, Paper 2024\/2053 (2024). https:\/\/eprint.iacr.org\/2024\/2053"},{"key":"1_CR9","unstructured":"Dobraunig, C., Matusiewicz, K., Mennink, B., Tereschenko, A.: Efficient instances of docked double decker with AES. IACR Cryptol. ePrint Arch., 84 (2024). https:\/\/eprint.iacr.org\/2024\/084"},{"key":"1_CR10","doi-asserted-by":"crossref","unstructured":"Dobraunig, C., Matusiewicz, K., Mennink, B., Tereschenko, A.: Efficient instances of docked double decker with AES, and application to authenticated encryption. In: EUROCRYPT 2025, pp. 62\u201392 (2025)","DOI":"10.1007\/978-3-031-91107-1_3"},{"key":"1_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1007\/978-3-030-05378-9_3","volume-title":"Progress in Cryptology \u2013 INDOCRYPT 2018","author":"A Dutta","year":"2018","unstructured":"Dutta, A., Nandi, M.: Tweakable HCTR: a BBB secure tweakable enciphering scheme. In: Chakraborty, D., Iwata, T. (eds.) INDOCRYPT 2018. LNCS, vol. 11356, pp. 47\u201369. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-05378-9_3"},{"key":"1_CR12","unstructured":"Duy, H.N., Fern\u00e1ndez, P.G., Udovenko, A., Biryukov, A.: Accordion mode based on hash-encrypt-hash. Submitted to Workshop (2024). https:\/\/csrc.nist.gov\/csrc\/media\/Events\/2024\/accordion-cipher-mode-workshop-2024\/documents\/papers\/accordion-mode-based-hash-encrypt-hash.pdf"},{"key":"1_CR13","unstructured":"Gueron, S.: Intel advanced encryption standard (AES) new instructions set. https:\/\/www.intel.com\/content\/dam\/doc\/white-paper\/advanced-encryption-standard-new-instructions-set-paper.pdf (2010)"},{"key":"1_CR14","unstructured":"Gueron, S.: Constructions based on the AES round and polynomial multiplications that are efficient on modern processor architectures. https:\/\/csrc.nist.gov\/csrc\/media\/Presentations\/2023\/constructions-based-on-the-aes-round\/images-media\/sess-5-gueron-bcm-workshop-2023.pdf (2023)"},{"key":"1_CR15","unstructured":"Gueron, S., Kounavis, M.E.: Intel carry-less multiplication instruction and its usage for computing the GCM mode. https:\/\/www.intel.com\/content\/dam\/develop\/external\/us\/en\/documents\/clmul-wp-rev-2-02-2014-04-20.pdf (2014)"},{"key":"1_CR16","doi-asserted-by":"crossref","unstructured":"Gueron, S., Lindell, Y.: Better bounds for block cipher modes of operation via nonce-based key derivation. In: CCS 2017, pp. 1019\u20131036. ACM (2017)","DOI":"10.1145\/3133956.3133992"},{"issue":"4","key":"1_CR17","first-page":"1","volume":"2019","author":"A Gunsing","year":"2019","unstructured":"Gunsing, A., Daemen, J., Mennink, B.: Deck-based wide block cipher modes and an exposition of the blinded keyed hashing model. IACR Trans. Symmetric Cryptol. 2019(4), 1\u201322 (2019)","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"1_CR18","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"412","DOI":"10.1007\/978-3-540-74143-5_23","volume-title":"Advances in Cryptology - CRYPTO 2007","author":"S Halevi","year":"2007","unstructured":"Halevi, S.: Invertible universal hashing and the TET encryption mode. In: Menezes, A. (ed.) CRYPTO 2007. LNCS, vol. 4622, pp. 412\u2013429. Springer, Heidelberg (2007). https:\/\/doi.org\/10.1007\/978-3-540-74143-5_23"},{"key":"1_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"482","DOI":"10.1007\/978-3-540-45146-4_28","volume-title":"Advances in Cryptology - CRYPTO 2003","author":"S Halevi","year":"2003","unstructured":"Halevi, S., Rogaway, P.: A tweakable enciphering mode. In: Boneh, D. (ed.) CRYPTO 2003. LNCS, vol. 2729, pp. 482\u2013499. Springer, Heidelberg (2003). https:\/\/doi.org\/10.1007\/978-3-540-45146-4_28"},{"key":"1_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"292","DOI":"10.1007\/978-3-540-24660-2_23","volume-title":"Topics in Cryptology \u2013 CT-RSA 2004","author":"S Halevi","year":"2004","unstructured":"Halevi, S., Rogaway, P.: A parallelizable enciphering mode. In: Okamoto, T. (ed.) CT-RSA 2004. LNCS, vol. 2964, pp. 292\u2013304. Springer, Heidelberg (2004). https:\/\/doi.org\/10.1007\/978-3-540-24660-2_23"},{"key":"1_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1007\/978-3-662-46800-5_2","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2015","author":"VT Hoang","year":"2015","unstructured":"Hoang, V.T., Krovetz, T., Rogaway, P.: Robust authenticated-encryption AEZ and the problem that it solves. In: Oswald, E., Fischlin, M. (eds.) EUROCRYPT 2015. LNCS, vol. 9056, pp. 15\u201344. Springer, Heidelberg (2015). https:\/\/doi.org\/10.1007\/978-3-662-46800-5_2"},{"key":"1_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"310","DOI":"10.1007\/11799313_20","volume-title":"Fast Software Encryption","author":"T Iwata","year":"2006","unstructured":"Iwata, T.: New blockcipher modes of operation with beyond the birthday bound security. In: Robshaw, M. (ed.) FSE 2006. LNCS, vol. 4047, pp. 310\u2013327. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11799313_20"},{"issue":"1","key":"1_CR23","doi-asserted-by":"publisher","first-page":"135","DOI":"10.1109\/TC.2010.147","volume":"60","author":"K Jankowski","year":"2011","unstructured":"Jankowski, K., Laurent, P.: Packed AES-GCM algorithm suitable for AES\/PCLMULQDQ instructions. IEEE Trans. Comput. 60(1), 135\u2013138 (2011)","journal-title":"IEEE Trans. Comput."},{"key":"1_CR24","unstructured":"Lee, B.: A BBB secure accordion mode from HCTR. Workshop Presentation (2024). https:\/\/csrc.nist.gov\/csrc\/media\/Presentations\/2024\/a-bbb-secure-accordion-mode-from-hctr\/images-media\/sess-8-lee-acm-workshop-2024.pdf"},{"key":"1_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"470","DOI":"10.1007\/3-540-45539-6_34","volume-title":"Advances in Cryptology \u2014 EUROCRYPT 2000","author":"S Lucks","year":"2000","unstructured":"Lucks, S.: The sum of PRPs is a secure PRF. In: Preneel, B. (ed.) EUROCRYPT 2000. LNCS, vol. 1807, pp. 470\u2013484. Springer, Heidelberg (2000). https:\/\/doi.org\/10.1007\/3-540-45539-6_34"},{"key":"1_CR26","unstructured":"Morris, D.: NIST plans. Posted on NIST Ciphermodes Forum (2024). https:\/\/groups.google.com\/a\/list.nist.gov\/g\/ciphermodes-forum\/c\/D5qni2KDoms"},{"key":"1_CR27","doi-asserted-by":"publisher","unstructured":"Naito, Y., Sasaki, Y., Sugawara, T.: The exact multi-user security of (tweakable) key alternating ciphers with a single permutation. In: EUROCRYPT 2024, Part I. LNCS, vol. 14651, pp. 97\u2013127. Springer, Cham (2024). https:\/\/doi.org\/10.1007\/978-3-031-58716-0_4","DOI":"10.1007\/978-3-031-58716-0_4"},{"key":"1_CR28","doi-asserted-by":"crossref","unstructured":"Naito, Y., Sasaki, Y., Sugawara, T., Yasuda, K.: The multi-user security of triple encryption, revisited: exact security, strengthening, and application to TDES. In: CCS 2022. pp. 2323\u20132336. ACM (2022)","DOI":"10.1145\/3548606.3560674"},{"key":"#cr-split#-1_CR29.1","unstructured":"NIST: Advanced encryption standard (AES). FIPS 197 (2023), published November 26, 2001"},{"key":"#cr-split#-1_CR29.2","unstructured":"Updated May 9, 2023. https:\/\/nvlpubs.nist.gov\/nistpubs\/FIPS\/NIST.FIPS.197-upd1.pdf"},{"key":"1_CR30","unstructured":"NIST: The third NIST workshop on block cipher modes of operation 2023. https:\/\/csrc.nist.gov\/events\/2023\/third-workshop-on-block-cipher-modes-of-operation (2023)"},{"key":"1_CR31","unstructured":"NIST: NIST workshop on the requirements for an accordion cipher mode 2024. https:\/\/csrc.nist.gov\/Events\/2024\/accordion-cipher-mode-workshop-2024 (2024)"},{"key":"1_CR32","unstructured":"NIST: Pre-draft call for comments: NIST launches development of cryptographic accordions. https:\/\/csrc.nist.gov\/pubs\/sp\/800\/197\/a\/iprd (2025)"},{"key":"1_CR33","doi-asserted-by":"publisher","unstructured":"Patarin, J.: The \u201cCoefficients H\u201d technique. In: SAC 2008. vol.\u00a05381, pp. 328\u2013345. Springer, Berlin, Heidelberg (2008). https:\/\/doi.org\/10.1007\/978-3-642-04159-4_21","DOI":"10.1007\/978-3-642-04159-4_21"},{"key":"1_CR34","unstructured":"The Linux Kernel: hctr2.c. https:\/\/github.com\/torvalds\/linux\/blob\/master\/crypto\/hctr2.c. Accessed 15 May 2025"},{"key":"1_CR35","unstructured":"Turan, M.S.: Open discussion next steps. Discussed at NIST Workshop (2024). https:\/\/csrc.nist.gov\/csrc\/media\/Presentations\/2024\/open-discussion\/images-media\/sess-9-turan-acm-workshop-2024.pdf"},{"key":"1_CR36","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"175","DOI":"10.1007\/11599548_15","volume-title":"Information Security and Cryptology","author":"P Wang","year":"2005","unstructured":"Wang, P., Feng, D., Wu, W.: HCTR: a variable-input-length enciphering mode. In: Feng, D., Lin, D., Yung, M. (eds.) CISC 2005. LNCS, vol. 3822, pp. 175\u2013188. Springer, Heidelberg (2005). https:\/\/doi.org\/10.1007\/11599548_15"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 ASIACRYPT 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-95-5018-0_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,7]],"date-time":"2025-12-07T11:57:05Z","timestamp":1765108625000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-95-5018-0_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,8]]},"ISBN":["9789819550173","9789819550180"],"references-count":37,"URL":"https:\/\/doi.org\/10.1007\/978-981-95-5018-0_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,12,8]]},"assertion":[{"value":"8 December 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ASIACRYPT","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on the Theory and Application of Cryptology and Information Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Melbourne, VIC","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 December 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 December 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"asiacrypt2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/asiacrypt.iacr.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}