{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T19:02:11Z","timestamp":1791399731558,"version":"4.3.3"},"reference-count":37,"publisher":"Springer Science and Business Media LLC","issue":"3","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["J Cryptol"],"published-print":{"date-parts":[[2011,7]]},"DOI":"10.1007\/s00145-010-9073-y","type":"journal-article","created":{"date-parts":[[2010,8,31]],"date-time":"2010-08-31T19:21:20Z","timestamp":1283282480000},"page":"588-613","source":"Crossref","is-referenced-by-count":129,"title":["Tweakable Block Ciphers"],"prefix":"10.1007","volume":"24","author":[{"given":"Moses","family":"Liskov","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ronald L.","family":"Rivest","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Wagner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2010,9,2]]},"reference":[{"key":"9073_CR1","unstructured":"American National Standards Institute (ANSI). American National Standard for Information Systems\u2013Data Encryption Algorithm\u2013Modes of Operation (1983)"},{"key":"9073_CR2","unstructured":"K. Aoki, H. Lipmaa, Fast implementations of AES candidates, in Third AES Candidate Conference, April 2000"},{"issue":"3","key":"9073_CR3","first-page":"362","volume":"61","author":"M. Bellare","year":"2000","unstructured":"M. Bellare, J. Killian, P. Rogaway, The security of cipher block chaining message authentication code. JCSS 61(3), 362\u2013399 (2000)","journal-title":"JCSS"},{"key":"9073_CR4","unstructured":"M. Bellare, T. Kohno, A theoretical treatment of related-key attacks: RKA-PRPs, RKA-PRFs, and applications. Full version, available at http:\/\/www-cse.ucsd.edu\/users\/mihir\/papers\/rka.html"},{"key":"9073_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"491","DOI":"10.1007\/3-540-39200-9_31","volume-title":"Advances in Cryptology\u2014EUROCRYPT 2003","author":"M. Bellare","year":"2003","unstructured":"M. Bellare, T. Kohno, A theoretical treatment of related-key attacks: RKA-PRPs, RKA-PRFs, and applications, in Advances in Cryptology\u2014EUROCRYPT 2003, ed. by E. Biham. Lecture Notes in Computer Science (Springer, Berlin, 2003), pp.\u00a0491\u2013506"},{"key":"9073_CR6","unstructured":"D.J. Bernstein, Floating-point arithmetic and message authentication, March 2000. Unpublished manuscript. Available at http:\/\/cr.yp.to\/papers.html#hash127"},{"issue":"4","key":"9073_CR7","doi-asserted-by":"crossref","first-page":"229","DOI":"10.1007\/BF00203965","volume":"7","author":"E. Biham","year":"1994","unstructured":"E. Biham, New types of cryptanalytic attacks using related keys. J. Cryptol. 7(4), 229\u2013246 (1994)","journal-title":"J. Cryptol."},{"key":"9073_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"398","DOI":"10.1007\/3-540-48285-7_34","volume-title":"Proceedings ASIACRYPT \u201994","author":"E. Biham","year":"1994","unstructured":"E. Biham, A. Biryukov, How to strengthen DES using existing hardware, in Proceedings ASIACRYPT \u201994. Lecture Notes in Computer Science, vol.\u00a0917 (Springer, Berlin, 1994), pp.\u00a0398\u2013412"},{"key":"9073_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"526","DOI":"10.1007\/11426639_31","volume-title":"Advances in Cryptology\u2014EUROCRYPT 2005","author":"J. Black","year":"2005","unstructured":"J. Black, M. Cochran, T. Shrimpton, On the impossibility of highly-efficient blockcipher-based hash functions, in Advances in Cryptology\u2014EUROCRYPT 2005, ed. by R. Cramer. Lecture Notes in Computer Science (Springer, Berlin, 2005), pp.\u00a0526\u2013541"},{"key":"9073_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"216","DOI":"10.1007\/3-540-48405-1_14","volume-title":"Proceedings CRYPTO \u201999","author":"J. Black","year":"1999","unstructured":"J. Black, S. Halevi, H. Krawczyk, T. Krovetz, P. Rogaway, UMAC: Fast and secure message authentication, in Proceedings CRYPTO \u201999. Lecture Notes in Computer Science, vol.\u00a01666 (Springer, Berlin, 1999), pp.\u00a0216\u2013233"},{"issue":"2","key":"9073_CR11","doi-asserted-by":"crossref","first-page":"111","DOI":"10.1007\/s00145-004-0016-3","volume":"18","author":"J. Black","year":"2005","unstructured":"J. Black, P. Rogaway, CBC MACs for arbitrary-length messages: The three-key constructions. J. Cryptol. 18(2), 111\u2013131 (2005)","journal-title":"J. Cryptol."},{"key":"9073_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"88","DOI":"10.1007\/11937807_8","volume-title":"Inscrypt 2006\u2014Information Security and Cryptography, Second SKLOIS Conference","author":"D. Chakraborty","year":"2006","unstructured":"D. Chakraborty, P. Sarkar, A general construction of tweakable block ciphers and different modes of operations, in Inscrypt 2006\u2014Information Security and Cryptography, Second SKLOIS Conference. Lecture Notes in Computer Science, vol.\u00a04318 (Springer, Berlin, 2006), pp.\u00a088\u2013102"},{"key":"9073_CR13","series-title":"Lecture Notes in Computer Science","first-page":"49","volume-title":"Fast Software Encryption: 7th International Workshop","author":"P. Crowley","year":"2000","unstructured":"P. Crowley, Mercy: A fast large block cipher for disk sector encryption, in Fast Software Encryption: 7th International Workshop. Lecture Notes in Computer Science, vol.\u00a01978 (Springer, Berlin, 2000), pp.\u00a049\u201363. Also available at: www.ciphergoth.org\/crypto\/mercy"},{"key":"9073_CR14","series-title":"Lecture Notes in Computer Science, LNCS","first-page":"495","volume-title":"Proceedings ASIACRYPT \u201991","author":"J. Daemen","year":"1991","unstructured":"J. Daemen, Limitations of the Even\u2013Mansour construction, in Proceedings ASIACRYPT \u201991. Lecture Notes in Computer Science, LNCS, vol.\u00a0739 (Springer, Berlin, 1991), pp.\u00a0495\u2013499"},{"key":"9073_CR15","unstructured":"J. Daemen, V. Rijmen, AES proposal: Rijndael. Available at http:\/\/www.nist.gov\/aes . August (1998)"},{"issue":"3","key":"9073_CR16","doi-asserted-by":"crossref","first-page":"151","DOI":"10.1007\/s001459900025","volume":"10","author":"S. Even","year":"1997","unstructured":"S. Even, Y. Mansour, A construction of a cipher from a single pseudorandom permutation. J. Cryptol. 10(3), 151\u2013161 (1997)","journal-title":"J. Cryptol."},{"key":"9073_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1007\/3-540-45473-X_3","volume-title":"Fast Software Encryption, 8th International Workshop","author":"S. Fluhrer","year":"2002","unstructured":"S. Fluhrer, Cryptanalysis of the Mercy block cipher, in Fast Software Encryption, 8th International Workshop, ed. by M. Matsui. Lecture Notes in Computer Science, vol.\u00a02355 (Springer, Berlin, 2002), pp.\u00a028\u201336"},{"key":"9073_CR18","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"342","DOI":"10.1007\/978-3-540-76900-2_21","volume-title":"Advances in Cryptology\u2014ASIACRYPT 2007","author":"D. Goldenberg","year":"2007","unstructured":"D. Goldenberg, S. Hohenberger, M. Liskov, H. Seyalioglu, E.C. Schwartz, On tweaking Luby\u2013Rackoff blockciphers, in Advances in Cryptology\u2014ASIACRYPT 2007. Lecture Notes in Computer Science, vol.\u00a04833 (Springer, Berlin, 2007), pp.\u00a0342\u2013356"},{"key":"9073_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"57","DOI":"10.1007\/3-540-44983-3_5","volume-title":"Selected Areas in Cryptography","author":"L. Granboulan","year":"2001","unstructured":"L. Granboulan, P. Nguyen, F. Noilhan, S. Vaudenay, DFCv2, in Selected Areas in Cryptography. Lecture Notes in Computer Science, vol.\u00a02012 (Springer, Berlin, 2001), pp.\u00a057\u201371"},{"key":"9073_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"315","DOI":"10.1007\/978-3-540-30556-9_25","volume-title":"INDOCRYPT","author":"S. Halevi","year":"2004","unstructured":"S. Halevi, EME*: Extending EME to Handle Arbitrary-Length Messages with Associated Data, in INDOCRYPT, ed. by A. Canteaut, K. Viswanathan. Lecture Notes in Computer Science, vol.\u00a03348 (Springer, Berlin, 2004), pp.\u00a0315\u2013327"},{"key":"9073_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"482","DOI":"10.1007\/978-3-540-45146-4_28","volume-title":"Advances in Cryptology: CRYPTO 2003","author":"S. Halevi","year":"2003","unstructured":"S. Halevi, P. Rogaway, A tweakable enciphering mode, in Advances in Cryptology: CRYPTO 2003, ed. by D. Boneh. Lecture Notes in Computer Science, vol.\u00a02729 (Springer, Berlin, 2003), pp.\u00a0482\u2013429"},{"key":"9073_CR22","series-title":"LNCS","doi-asserted-by":"crossref","first-page":"292","DOI":"10.1007\/978-3-540-24660-2_23","volume-title":"Topics in Cryptology, CT-RSA 2004","author":"S. Halevi","year":"2004","unstructured":"S. Halevi, P. Rogaway, A parallelizable enciphering mode, in Topics in Cryptology, CT-RSA 2004. LNCS, vol.\u00a02964 (Springer, Berlin, 2004), pp.\u00a0292\u2013304"},{"key":"9073_CR23","series-title":"Lecture Notes in Computer Science","volume-title":"Advances in Cryptology\u2014EUROCRYPT 2001","author":"C. Jutla","year":"2001","unstructured":"C. Jutla, Encryption modes with almost free message integrity, in Advances in Cryptology\u2014EUROCRYPT 2001, ed. by B. Pfitzmann. Lecture Notes in Computer Science, vol.\u00a02045 (Springer, Berlin, 2001)"},{"key":"9073_CR24","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"252","DOI":"10.1007\/3-540-68697-5_20","volume-title":"Proceedings CRYPTO \u201996","author":"J. Kilian","year":"1996","unstructured":"J. Kilian, P. Rogaway, How to protect DES against exhaustive search (an analysis of DESX), in Proceedings CRYPTO \u201996. Lecture Notes in Computer Science, vol.\u00a01109 (Springer, Berlin, 1996), pp.\u00a0252\u2013267. See http:\/\/www.cs.ucdavis.edu\/rogaway\/papers\/desx.ps for an updated version"},{"key":"9073_CR25","unstructured":"M. Liskov, New tools in cryptography: Mutually independent commitment, tweakable block ciphers, and plaintext awareness via key registration. Ph.D. Thesis, MIT Laboratory for Computer Science (2004)"},{"key":"9073_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1007\/3-540-45708-9_3","volume-title":"Advances in Cryptology\u2014CRYPTO 2002","author":"M. Liskov","year":"2002","unstructured":"M. Liskov, R. Rivest, D. Wagner, Tweakable block ciphers, in Advances in Cryptology\u2014CRYPTO 2002, ed. by M. Yung. Lecture Notes in Computer Science (Springer, Berlin, 2002), pp.\u00a031\u201346"},{"key":"9073_CR27","unstructured":"M. Luby, C. Rackoff, How to construct pseudorandom permutations from pseudorandom functions, in Proceedings of the Eighteenth Annual ACM Symposium on Theory of Computing, Berkeley, California, 28\u201330 May 1986"},{"key":"9073_CR28","volume-title":"Handbook of Applied Cryptography","author":"Alfred J. Menezes","year":"1997","unstructured":"Alfred J. Menezes, Paul C. van Oorschot, Scott A. Vanstone, Handbook of Applied Cryptography (CRC Press, Boca Raton, 1997)"},{"key":"9073_CR29","series-title":"Lecture Notes in Computer Science","first-page":"96","volume-title":"Selected Areas in Cryptography\u2014SAC 2006","author":"K. Minematsu","year":"2006","unstructured":"K. Minematsu, Improved security analysis of XEX and LRW modes, in Selected Areas in Cryptography\u2014SAC 2006. Lecture Notes in Computer Science, vol.\u00a04356 (Springer, Berlin, 2006), pp.\u00a096\u2013113"},{"issue":"11","key":"9073_CR30","doi-asserted-by":"crossref","first-page":"594","DOI":"10.1145\/359168.359172","volume":"22","author":"R. Morris","year":"1979","unstructured":"R. Morris, K. Thompson, Password security: A case history. Commun. ACM 22(11), 594\u2013597 (1979)","journal-title":"Commun. ACM"},{"key":"9073_CR31","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1007\/PL00003817","volume":"12","author":"M. Naor","year":"1999","unstructured":"M. Naor, O. Reingold, On the construction of pseudo-random permutations: Luby-Rackoff revisited. J.\u00a0Cryptol. 12, 29\u201366 (1999). Extended abstract in Proc. 29th Annual ACM STOC (1997), pp.\u00a0189\u2013199","journal-title":"J.\u00a0Cryptol."},{"key":"9073_CR32","series-title":"Lecture Notes in Computer Science","volume-title":"Advances in Cryptology\u2014ASIACRYPT 2004","author":"P. Rogaway","year":"2004","unstructured":"P. Rogaway, Efficient instantiations of tweakable blockciphers and refinements to modes OCB and PMAC, in Advances in Cryptology\u2014ASIACRYPT 2004, Jeju Island, Korea, 5\u20139 December 2004, ed. by P.J. Lee. Lecture Notes in Computer Science, vol.\u00a03329 (Springer, Berlin, 2004)"},{"key":"9073_CR33","first-page":"196","volume-title":"Eighth ACM Conference on Computer and Communications Security (CCS-8)","author":"P. Rogaway","year":"2001","unstructured":"P. Rogaway, M. Bellare, J. Black, T. Krovetz, A block-cipher mode of operation for efficient authenticated encryption, in Eighth ACM Conference on Computer and Communications Security (CCS-8) (ACM, New York, 2001), pp.\u00a0196\u2013205. See http:\/\/www.cs.ucdavis.edu\/~rogaway\/ocb\/ocb-doc.htm"},{"key":"9073_CR34","volume-title":"Applied Cryptography, Second Edition: Protocols, Algorithms, and Source Code in C","author":"B. Schneier","year":"1996","unstructured":"B. Schneier, Applied Cryptography, Second Edition: Protocols, Algorithms, and Source Code in C (Wiley, New York, 1996)"},{"key":"9073_CR35","unstructured":"R. Schroeppel, The Hasty Pudding Cipher. NIST AES proposal, available at http:\/\/www.cs.arizona.edu\/~rcs\/hpc\/ (1998)"},{"key":"9073_CR36","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"313","DOI":"10.1007\/3-540-68697-5_24","volume-title":"Proceedings CRYPTO \u201996","author":"Victor Shoup","year":"1996","unstructured":"Victor Shoup, On fast and provably secure message authentication based on universal hashing, in Proceedings CRYPTO \u201996. Lecture Notes in Computer Science, vol.\u00a01109 (Springer, Berlin, 1996), pp.\u00a0313\u2013328"},{"key":"9073_CR37","unstructured":"US Department of Commerce National Bureau of Standards. DES modes of operation (1980). Federal Information Processing Standards Publication 81"}],"container-title":["Journal of Cryptology"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/www.springerlink.com\/index\/pdf\/10.1007\/s00145-010-9073-y","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,19]],"date-time":"2017-06-19T09:24:17Z","timestamp":1497864257000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s00145-010-9073-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,9,2]]},"references-count":37,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2011,7]]}},"alternative-id":["9073"],"URL":"https:\/\/doi.org\/10.1007\/s00145-010-9073-y","relation":{},"ISSN":["0933-2790","1432-1378"],"issn-type":[{"value":"0933-2790","type":"print"},{"value":"1432-1378","type":"electronic"}],"subject":[],"published":{"date-parts":[[2010,9,2]]}}}