{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,15]],"date-time":"2026-02-15T09:08:57Z","timestamp":1771146537364,"version":"3.50.1"},"reference-count":59,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2020,3,5]],"date-time":"2020-03-05T00:00:00Z","timestamp":1583366400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,3,5]],"date-time":"2020-03-05T00:00:00Z","timestamp":1583366400000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cryptol"],"published-print":{"date-parts":[[2020,7]]},"DOI":"10.1007\/s00145-020-09347-y","type":"journal-article","created":{"date-parts":[[2020,3,5]],"date-time":"2020-03-05T19:02:22Z","timestamp":1583434942000},"page":"1272-1317","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":16,"title":["Tight Security of Cascaded LRW2"],"prefix":"10.1007","volume":"33","author":[{"given":"Ashwin","family":"Jha","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mridul","family":"Nandi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,3,5]]},"reference":[{"issue":"3","key":"9347_CR1","doi-asserted-by":"publisher","first-page":"588","DOI":"10.1007\/s00145-010-9073-y","volume":"24","author":"M Liskov","year":"2011","unstructured":"M. Liskov, R.L. Rivest, D.A. Wagner, Tweakable block ciphers. J. Cryptol.\u00a024(3), 588\u2013613 (2011)","journal-title":"J. Cryptol."},{"key":"9347_CR2","unstructured":"P. Rogaway, Efficient instantiations of tweakable blockciphers and refinements to modes OCB and PMAC, in Advances in Cryptology\u2014ASIACRYPT \u201904, Proceedings (2004), pp. 16\u201331"},{"key":"9347_CR3","unstructured":"P. Rogaway, M. Bellare, J. Black, T. Krovetz, OCB: a block-cipher mode of operation for efficient authenticated encryption, in ACM Conference on Computer and Communications Security\u2014ACM-CCS \u201901, Proceedings (2001), pp. 196\u2013205"},{"key":"9347_CR4","unstructured":"T. Krovetz, P. Rogaway, The software performance of authenticated-encryption modes, in Fast Software Encryption\u2014FSE \u201911, Revised Selected Papers (2011), pp. 306\u2013327"},{"key":"9347_CR5","unstructured":"T. Shrimpton, R.S. Terashima, A modular framework for building variable-input-length tweakable ciphers, in Advances in Cryptology\u2014ASIACRYPT \u201913, Proceedings, Part I (2013), pp. 405\u2013423"},{"key":"9347_CR6","unstructured":"E. Andreeva, A. Bogdanov, A. Luykx, B. Mennink, E. Tischhauser, Yasuda, K., Parallelizable and authenticated online ciphers, in Advances in Cryptology\u2014ASIACRYPT \u201913, Proceedings, Part I (2013), pp. 424\u2013443"},{"key":"9347_CR7","unstructured":"T. Peyrin, Y. Seurin, Counter-in-tweak: authenticated encryption modes for tweakable block ciphers, in Advances in Cryptology\u2014CRYPTO \u201916, Proceedings, Part I (2016), pp. 33\u201363"},{"key":"9347_CR8","unstructured":"J. Jean, I. Nikolic, T. Peyrin, Tweaks and keys for block ciphers: the TWEAKEY framework, in Advances in Cryptology\u2014ASIACRYPT \u201914, Proceedings, Part II (2014), pp. 274\u2013288"},{"key":"9347_CR9","unstructured":"V.T. Hoang, T. Krovetz, P. Rogaway, Robust authenticated-encryption AEZ and the problem that it solves, in Advances in Cryptology\u2014EUROCRYPT \u201915, Proceedings, Part I (2015), pp. 15\u201344"},{"key":"9347_CR10","unstructured":"Y. Naito, Full prf-secure message authentication code based on tweakable block cipher, in Provable Security\u2014ProvSec \u201915, Proceedings (2015), pp. 167\u2013182"},{"key":"9347_CR11","unstructured":"E. List, M. Nandi, Revisiting full-prf-secure PMAC and using it for beyond-birthday authenticated encryption, in Topics in Cryptology\u2014CT-RSA \u201917, Proceedings (2017), pp. 258\u2013274"},{"key":"9347_CR12","unstructured":"T. Iwata, K. Minematsu, T. Peyrin, Y. Seurin, ZMAC: A fast tweakable block cipher mode for highly secure message authentication, in Advances in Cryptology\u2014CRYPTO \u201917, Proceedings, Part III (2017), pp. 34\u201365"},{"key":"9347_CR13","unstructured":"B. Cogliati, R. Lampe, Y. Seurin, Tweaking even-mansour ciphers, in Advances in Cryptology\u2014CRYPTO \u201915, Proceedings, Part I (2015), pp. 189\u2013208"},{"issue":"4","key":"9347_CR14","doi-asserted-by":"crossref","first-page":"306","DOI":"10.46586\/tosc.v2017.i4.306-325","volume":"2017","author":"E List","year":"2017","unstructured":"E. List, M. Nandi, ZMAC+\u2014an efficient variable-output-length variant of ZMAC. IACR Trans. Symmetric Cryptol.\u00a02017(4) (2017) 306\u2013325","journal-title":"IACR Trans. Symmetric Cryptol."},{"issue":"3","key":"9347_CR15","doi-asserted-by":"crossref","first-page":"43","DOI":"10.46586\/tosc.v2019.i3.43-80","volume":"2019","author":"T Grochow","year":"2019","unstructured":"T. Grochow, E. List, M. Nandi, Dovemac: a tbc-based PRF with smaller state, full security, and high rate. IACR Trans. Symmetric Cryptol.\u00a02019(3) (2019) 43\u201380","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"9347_CR16","unstructured":"K. Minematsu, Beyond-birthday-bound security based on tweakable block cipher, in Fast Software Encryption\u2014FSE \u201909, Revised Selected Papers (2009), pp. 308\u2013326"},{"key":"9347_CR17","unstructured":"P. Rogaway, H. Zhang, Online ciphers from tweakable blockciphers, in Topics in Cryptology\u2014CT-RSA \u201911, Proceedings (2011), pp. 237\u2013249"},{"issue":"1","key":"9347_CR18","doi-asserted-by":"publisher","first-page":"177","DOI":"10.1007\/s12095-017-0250-9","volume":"10","author":"C Forler","year":"2018","unstructured":"C. Forler, E. List, S. Lucks, J. Wenzel, Poex: a beyond-birthday-bound-secure on-line cipher. Cryptogr. Commun.\u00a010(1), 177\u2013193 (2018)","journal-title":"Cryptogr. Commun."},{"issue":"5","key":"9347_CR19","doi-asserted-by":"publisher","first-page":"731","DOI":"10.1007\/s12095-017-0275-0","volume":"10","author":"A Jha","year":"2018","unstructured":"A. Jha, M. Nandi, On rate-1 and beyond-the-birthday bound secure online ciphers using tweakable block ciphers. Cryptogr. Commun.\u00a010(5), 731\u2013753 (2018)","journal-title":"Cryptogr. Commun."},{"key":"9347_CR20","unstructured":"A. Dutta, M. Nandi, Tweakable HCTR: a BBB secure tweakable enciphering scheme, in Progress in cryptology\u2014INDOCRYPT \u201918, Proceedings (2018), pp. 47\u201369"},{"key":"9347_CR21","unstructured":"R. Bhaumik, E. List, M. Nandi, ZCZ\u2014achieving n-bit SPRP security with a minimal number of tweakable-block-cipher calls, in Advances in Cryptology\u2014ASIACRYPT \u201918, Proceedings, Part I (2018), pp. 336\u2013366"},{"key":"9347_CR22","unstructured":"C. Beierle, J. Jean, S. K\u00f6lbl, G. Leander, A. Moradi, T. Peyrin, Y. Sasaki, P. Sasdrich, S.M. Sim, The SKINNY family of block ciphers and its low-latency variant MANTIS, in Advances in Cryptology\u2014CRYPTO \u201916, Proceedings, Part II (2016), pp. 123\u2013153"},{"issue":"5","key":"9347_CR23","doi-asserted-by":"publisher","first-page":"1991","DOI":"10.1109\/TIT.2008.920247","volume":"54","author":"D Chakraborty","year":"2008","unstructured":"D. Chakraborty, P. Sarkar, A general construction of tweakable block ciphers and different modes of operations. IEEE Trans. Inf. Theory\u00a054(5), 1991\u20132006 (2008)","journal-title":"IEEE Trans. Inf. Theory"},{"key":"9347_CR24","unstructured":"K. Minematsu, Improved security analysis of XEX and LRW modes, in Selected Areas in Cryptography\u2014SAC \u201906, Revised Selected Papers (2006), pp. 96\u2013113"},{"key":"9347_CR25","unstructured":"R. Granger, P. Jovanovic, B. Mennink, S. Neves, Improved masking for tweakable blockciphers with applications to authenticated encryption, in Advances in Cryptology\u2014EUROCRYPT \u201916, Proceedings, Part I (2016), pp. 263\u2013293"},{"key":"9347_CR26","unstructured":"W. Landecker, T. Shrimpton, R.S. Terashima, Tweakable blockciphers with beyond birthday-bound security, in Advances in Cryptology\u2014CRYPTO \u201912, Proceedings (2012), pp. 14\u201330"},{"key":"9347_CR27","first-page":"111","volume":"2014","author":"G Procter","year":"2014","unstructured":"G. Procter, A note on the CLRW2 tweakable block cipher construction. IACR Cryptol. ePrint Arch.\u00a02014, 111 (2014)","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"9347_CR28","unstructured":"R. Lampe, Y. Seurin, Tweakable blockciphers with asymptotically optimal security, in Fast Software Encryption\u2014FSE \u201913, Revised Selected Papers (2013), pp. 133\u2013151"},{"key":"9347_CR29","unstructured":"B. Mennink, Towards tight security of cascaded LRW2, in Theory of Cryptography\u2014TCC \u201918, Proceedings, Part II (2018), pp. 192\u2013222"},{"key":"9347_CR30","unstructured":"A. Bogdanov, L.R. Knudsen, G. Leander, F. Standaert, J.P. Steinberger, E. Tischhauser, Key-alternating ciphers in a provable setting: encryption using a small number of public permutations\u2014(extended abstract), in Advances in Cryptology\u2014EUROCRYPT \u201912, Proceedings (2012), pp. 45\u201362"},{"key":"9347_CR31","unstructured":"B. Mennink, Optimally secure tweakable blockciphers, in Fast Software Encryption\u2014FSE \u201915, Revised Selected Papers (2015), pp. 428\u2013448"},{"key":"9347_CR32","first-page":"363","volume":"2015","author":"B Mennink","year":"2015","unstructured":"B. Mennink, Optimally secure tweakable blockciphers. IACR Cryptol. ePrint Arch.\u00a02015, 363 (2015)","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"9347_CR33","unstructured":"L. Wang, J. Guo, G. Zhang, J. Zhao, D. Gu, How to build fully secure tweakable blockciphers from classical blockciphers, in Advances in Cryptology\u2014ASIACRYPT \u201916, Proceedings, Part I (2016), pp. 455\u2013483"},{"key":"9347_CR34","unstructured":"A. Jha, E. List, K. Minematsu, S. Mishra, M. Nandi, XHX\u2014a framework for optimally secure tweakable block ciphers from classical block ciphers and universal hashing, in Progress in Cryptology\u2014LATINCRYPT \u201917, Revised Selected Papers (2017), pp. 207\u2013227"},{"key":"9347_CR35","unstructured":"B. Lee, J. Lee, Tweakable block ciphers secure beyond the birthday bound in the ideal cipher model, in Advances in Cryptology\u2014ASIACRYPT \u201918, Proceedings, Part I (2018), pp. 305\u2013335"},{"key":"9347_CR36","unstructured":"B. Mennink, S. Neves, Encrypted Davies\u2013Meyer and its dual: towards optimal security using mirror theory, in Advances in Cryptology\u2014CRYPTO \u201917, Proceedings, Part III (2017), pp. 556\u2013583"},{"key":"9347_CR37","first-page":"287","volume":"2010","author":"J Patarin","year":"2010","unstructured":"J. Patarin, Introduction to mirror theory: analysis of systems of linear equalities and linear non equalities for cryptography. IACR Cryptol. ePrint Arch.\u00a02010, 287 (2010)","journal-title":"IACR Cryptol. ePrint Arch."},{"issue":"4","key":"9347_CR38","doi-asserted-by":"publisher","first-page":"321","DOI":"10.1007\/s00200-017-0326-y","volume":"28","author":"J Patarin","year":"2017","unstructured":"J. Patarin, Mirror theory and cryptography. Appl. Algebra Eng. Commun. Comput.\u00a028(4), 321\u2013338 (2017)","journal-title":"Appl. Algebra Eng. Commun. Comput."},{"key":"9347_CR39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-49530-9","volume-title":"Feistel Ciphers\u2014Security Proofs and Cryptanalysis","author":"V Nachef","year":"2017","unstructured":"V. Nachef, J. Patarin, E. Volte, Feistel Ciphers\u2014Security Proofs and Cryptanalysis. Springer, Berlin (2017)"},{"key":"9347_CR40","unstructured":"W. Dai, V.T. Hoang, S. Tessaro, Information-theoretic indistinguishability via the chi-squared method, in Advances in Cryptology\u2014CRYPTO \u201917, Proceedings, Part III (2017), pp. 497\u2013523"},{"key":"9347_CR41","unstructured":"N. Datta, A. Dutta, M. Nandi, K. Yasuda, Encrypt or decrypt? To make a single-key beyond birthday secure nonce-based MAC, in Advances in Cryptology\u2014CRYPTO \u201918, Proceedings, Part I. (2018), pp. 631\u2013661"},{"issue":"3","key":"9347_CR42","doi-asserted-by":"crossref","first-page":"36","DOI":"10.46586\/tosc.v2018.i3.36-92","volume":"2018","author":"N Datta","year":"2018","unstructured":"N. Datta, A. Dutta, M. Nandi, G. Paul, Double-block hash-then-sum: a paradigm for constructing bbb secure prf. IACR Trans. Symmetric Cryptol.\u00a02018(3), 36\u201392 (2018)","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"9347_CR43","unstructured":"V.T. Hoang, S. Tessaro, Key-alternating ciphers and key-length extension: exact bounds and multi-user security, in Advances in Cryptology\u2014CRYPTO \u201916, Proceedings, Part I (2016), pp. 3\u201332"},{"key":"9347_CR44","unstructured":"V.T. Hoang, S. Tessaro, The multi-user security of double encryption, in Advances in Cryptology\u2014EUROCRYPT \u201917, Proceedings, Part II (2017), pp. 381\u2013411"},{"key":"9347_CR45","unstructured":"C. Guo, L. Wang, Revisiting key-alternating feistel ciphers for shorter keys and multi-user security, in Advances in Cryptology\u2014ASIACRYPT \u201918, Proceedings, Part I (2018), pp. 213\u2013243"},{"key":"9347_CR46","unstructured":"J. Patarin, Etude des G\u00e9n\u00e9rateurs de Permutations Pseudo-al\u00e9atoires Bas\u00e9s sur le Sch\u00e9ma du DES. PhD thesis, Universit\u00e9 de Paris (1991)"},{"key":"9347_CR47","unstructured":"C. Hall, D.A. Wagner, J. Kelsey, B. Schneier, Building PRFs from PRPs, in Advances in Cryptology\u2014CRYPTO \u201998, Proceedings (1998), pp. 370\u2013389"},{"key":"9347_CR48","first-page":"24","volume":"1999","author":"M Bellare","year":"1999","unstructured":"M. Bellare, R. Impagliazzo, A tool for obtaining tighter security analyses of pseudorandom function based constructions, with applications to PRP to PRF conversion. IACR Cryptol. ePrint Arch.\u00a01999, 24 (1999)","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"9347_CR49","unstructured":"H. Krawczyk, LFSR-based hashing and authentication, in Advances in Cryptology\u2014CRYPTO \u201994, Proceedings (1994), pp. 129\u2013139"},{"issue":"2","key":"9347_CR50","doi-asserted-by":"publisher","first-page":"91","DOI":"10.1007\/PL00003822","volume":"12","author":"P Rogaway","year":"1999","unstructured":"P. Rogaway, Bucket hashing and its application to fast message authentication. J. Cryptol.\u00a012(2), 91\u2013115 (1999)","journal-title":"J. Cryptol."},{"key":"9347_CR51","unstructured":"A. Moch, E. List, Parallelizable MACs based on the sum of PRPs with security beyond the birthday bound, in Applied Cryptography and Network Security\u2014ACNS \u201919, Proceedings (2019), pp. 131\u2013151"},{"key":"9347_CR52","unstructured":"A. Dutta, M. Nandi, S. Talnikar, Beyond birthday bound secure MAC in faulty nonce model, in Advances in Cryptology\u2014EUROCRYPT \u201919, Proceedings, Part I (2019), pp. 437\u2013466"},{"key":"9347_CR53","unstructured":"G. Leurent, M. Nandi, F. Sibleyras, Generic attacks against beyond-birthday-bound MACs, in Advances in Cryptology\u2014CRYPTO \u201918, Proceedings, Part I (2018), pp. 306\u2013336"},{"key":"9347_CR54","unstructured":"W. Aiello, R. Venkatesan, Foiling birthday attacks in length-doubling transformations\u2014benes: a non-reversible alternative to feistel, in Advances in Cryptology\u2014EUROCRYPT \u201996, Proceedings (1996), pp. 307\u2013320"},{"key":"9347_CR55","unstructured":"J. Patarin, A. Montreuil, Benes and butterfly schemes revisited, in Information Security and Cryptology\u2014ICISC \u201905, Revised Selected Papers (2005), pp. 92\u2013116"},{"key":"9347_CR56","unstructured":"J. Patarin, A proof of security in o(2$${}^{\\text{n}}$$) for the benes scheme, in Progress in Cryptology\u2014AFRICACRYPT \u201908, Proceedings (2008), pp. 209\u2013220"},{"key":"9347_CR57","unstructured":"K. Yasuda, A new variant of PMAC: beyond the birthday bound, in Advances in Cryptology\u2014CRYPTO \u201911, Proceedings (2011), pp. 596\u2013609"},{"key":"9347_CR58","unstructured":"Y. Naito, Blockcipher-based MACs: beyond the birthday bound without message length, in Advances in Cryptology\u2014ASIACRYPT \u201917, Proceedings, Part III (2017), pp. 446\u2013470"},{"key":"9347_CR59","unstructured":"K. Minematsu, T. Iwata, Tweak-length extension for tweakable blockciphers, in Cryptography and Coding\u2014IMACC \u201915, Proceedings (2015), pp. 77\u201393"}],"container-title":["Journal of Cryptology"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-020-09347-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s00145-020-09347-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-020-09347-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,3,5]],"date-time":"2021-03-05T00:07:28Z","timestamp":1614902848000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s00145-020-09347-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,3,5]]},"references-count":59,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2020,7]]}},"alternative-id":["9347"],"URL":"https:\/\/doi.org\/10.1007\/s00145-020-09347-y","relation":{},"ISSN":["0933-2790","1432-1378"],"issn-type":[{"value":"0933-2790","type":"print"},{"value":"1432-1378","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,3,5]]},"assertion":[{"value":"30 April 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 February 2020","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 March 2020","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}