{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T19:09:13Z","timestamp":1791400153512,"version":"4.3.3"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,10,4]],"date-time":"2010-10-04T00:00:00Z","timestamp":1286150400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,10,4]]},"DOI":"10.1145\/1866307.1866364","type":"proceedings-article","created":{"date-parts":[[2010,10,5]],"date-time":"2010-10-05T14:38:23Z","timestamp":1286289503000},"page":"505-515","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":30,"title":["On the soundness of authenticate-then-encrypt"],"prefix":"10.1145","author":[{"given":"Ueli","family":"Maurer","sequence":"first","affiliation":[{"name":"ETH Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bj \u00f6rn","family":"Tackmann","sequence":"additional","affiliation":[{"name":"ETH Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2010,10,4]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      M.\n       \n      Bellare R.\n       \n      Canetti and \n      \n      \n      H.\n       \n      Krawczyk\n      \n  \n  . \n  Keying hash functions for message authentication. In N. Koblitz editor Advances in Cryptology -- CRYPTO\n   \n  1996 volume \n  1109\n   of \n  LNCS pages \n  1\n  --\n  15\n  . \n  IACR Springer-Verlag 1996.   }}M. Bellare R. Canetti and H. Krawczyk. Keying hash functions for message authentication. In N. Koblitz editor Advances in Cryptology -- CRYPTO 1996 volume 1109 of LNCS pages 1--15. IACR Springer-Verlag 1996.","DOI":"10.1007\/3-540-68697-5_1"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.5555\/795663.796360"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      M.\n       \n      Bellare A.\n       \n      Desai D.\n       \n      Pointcheval and \n      \n      \n      P.\n       \n      Rogaway\n      \n  \n  . \n  Relations among notions of security for public-key encryption schemes. In H. Krawczyk editor Advances in Cryptology -- CRYPTO\n   \n  1998 volume \n  1462\n   of \n  LNCS pages \n  26\n  --\n  45\n  . \n  IACR Springer-Verlag 1998.   }}M. Bellare A. Desai D. Pointcheval and P. Rogaway. Relations among notions of security for public-key encryption schemes. In H. Krawczyk editor Advances in Cryptology -- CRYPTO 1998 volume 1462 of LNCS pages 26--45. IACR Springer-Verlag 1998.","DOI":"10.1007\/BFb0055718"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1006\/jcss.1999.1694"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      M.\n       \n      Bellare\n     and \n      \n      \n      C.\n       \n      Namprempre\n      \n  \n  . \n  Authenticated encryption: Relations among notions and analysis of the generic composition paradigm. In T. Okamoto editor Advances in Cryptology -- ASIACRYPT\n   \n  2000 volume \n  1976\n   of \n  LNCS pages \n  531\n  --\n  545\n  . \n  IACR Springer 2000.   }}M. Bellare and C. Namprempre. Authenticated encryption: Relations among notions and analysis of the generic composition paradigm. In T. Okamoto editor Advances in Cryptology -- ASIACRYPT 2000 volume 1976 of LNCS pages 531--545. IACR Springer 2000.","DOI":"10.1007\/3-540-44448-3_41"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-008-9026-x"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/874063.875553"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      R.\n       \n      Canetti\n     and \n      \n      \n      H.\n       \n      Krawczyk\n      \n  \n  . \n  Analysis of key-exchange protocols and their use for building secure channels. In B. Pfitzmann editor Advances in Cryptology -- EUROCRYPT\n   \n  2001 volume \n  2045\n   of \n  LNCS pages \n  453\n  --\n  474\n  . \n  IACR Springer-Verlag 2001.   }}R. Canetti and H. Krawczyk. Analysis of key-exchange protocols and their use for building secure channels. In B. Pfitzmann editor Advances in Cryptology -- EUROCRYPT 2001 volume 2045 of LNCS pages 453--474. IACR Springer-Verlag 2001.","DOI":"10.1007\/3-540-44987-6_28"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      R.\n       \n      Canetti\n     and \n      \n      \n      H.\n       \n      Krawczyk\n      \n  \n  . \n  Universally composable notions of key exchange and secure channels. In L. R. Knudsen editor Advances in Cryptology -- EUROCRYPT\n   \n  2002 volume \n  3027\n   of \n  LNCS pages \n  337\n  --\n  351\n  . \n  IACR Springer-Verlag 2002.   }}R. Canetti and H. Krawczyk. Universally composable notions of key exchange and secure channels. In L. R. Knudsen editor Advances in Cryptology -- EUROCRYPT 2002 volume 3027 of LNCS pages 337--351. IACR Springer-Verlag 2002.","DOI":"10.1007\/3-540-46035-7_22"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      R.\n       \n      Canetti H.\n       \n      Krawczyk and \n      \n      \n      J. B.\n       \n      Nielsen\n      \n  \n  . \n  Relaxing chosen-ciphertext security. In D. Boneh editor Advances in Cryptology -- CRYPTO\n   \n  2003 volume \n  2729\n   of \n  LNCS pages \n  565\n  --\n  582\n  . \n  IACR Springer-Verlag 2003.  }}R. Canetti H. Krawczyk and J. B. Nielsen. Relaxing chosen-ciphertext security. In D. Boneh editor Advances in Cryptology -- CRYPTO 2003 volume 2729 of LNCS pages 565--582. IACR Springer-Verlag 2003.","DOI":"10.1007\/978-3-540-45146-4_33"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"}}T. Dierks and E. Rescorla. The Transport Layer Security (TLS) protocol version 1.2. RFC 5246 August 2008.  }}T. Dierks and E. Rescorla. The Transport Layer Security (TLS) protocol version 1.2. RFC 5246 August 2008.","DOI":"10.17487\/rfc5246"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1137\/S0097539795291562"},{"key":"e_1_3_2_1_14_1","volume-title":"Wiley","author":"Ferguson N.","year":"2003"},{"key":"e_1_3_2_1_15_1","volume-title":"Manuscript","author":"Gligor V. D.","year":"2002"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      J.\n       \n      Katz\n     and \n      \n      \n      M.\n       \n      Yung\n      \n  \n  . \n  Unforgeable encryption and chosen ciphertext secure modes of operation. In B. Schneier editor FSE\n   \n  2000 volume \n  1978\n   of \n  LNCS pages \n  284\n  --\n  299\n  . \n  IACR Springer-Verlag 2000.   }}J. Katz and M. Yung. Unforgeable encryption and chosen ciphertext secure modes of operation. In B. Schneier editor FSE 2000 volume 1978 of LNCS pages 284--299. IACR Springer-Verlag 2000.","DOI":"10.1007\/3-540-44706-7_20"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      H.\n       \n      Krawczyk\n    .\n      \n  \n   \n  The order of encryption and authentication for protecting communications. In J. Kilian editor Advances in Cryptology -- CRYPTO\n   \n  2001 volume \n  2139\n   of \n  LNCS pages \n  310\n  --\n  331\n  . \n  IACR Springer-Verlag 2001.   }}H. Krawczyk. The order of encryption and authentication for protecting communications. In J. Kilian editor Advances in Cryptology -- CRYPTO 2001 volume 2139 of LNCS pages 310--331. IACR Springer-Verlag 2001.","DOI":"10.1007\/3-540-44647-8_19"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      U.\n       \n      Maurer\n    .\n      \n  \n   \n  Indistinguishability of random systems. In L. R. Knudsen editor Advances in Cryptology -- EUROCRYPT\n   \n  2002 volume \n  2332\n   of \n  LNCS pages \n  110\n  --\n  132\n  . \n  IACR Springer-Verlag 2002.   }}U. Maurer. Indistinguishability of random systems. In L. R. Knudsen editor Advances in Cryptology -- EUROCRYPT 2002 volume 2332 of LNCS pages 110--132. IACR Springer-Verlag 2002.","DOI":"10.1007\/3-540-46035-7_8"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-14577-3_1"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      U.\n       \n      Maurer K.\n       \n      Pietrzak and \n      \n      \n      R.\n       \n      Renner\n      \n  \n  . \n  Indistinguishability amplification. In A. Menezes editor Advances in Cryptology -- CRYPTO\n   \n  2007 volume \n  4622\n   of \n  LNCS pages \n  130\n  --\n  149\n  . \n  Springer-Verlag Aug. 2007.   }}U. Maurer K. Pietrzak and R. Renner. Indistinguishability amplification. In A. Menezes editor Advances in Cryptology -- CRYPTO 2007 volume 4622 of LNCS pages 130--149. Springer-Verlag Aug. 2007.","DOI":"10.1007\/978-3-540-74143-5_8"},{"key":"e_1_3_2_1_21_1","unstructured":"}}U. Maurer and R. Renner. Abstract cryptography. In preparation 2010.  }}U. Maurer and R. Renner. Abstract cryptography. In preparation 2010."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-84628-984-2_2"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/2699889.2699893"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5555\/882495.884436"},{"key":"e_1_3_2_1_25_1","volume-title":"Preprint","author":"Ray M.","year":"2009"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586125"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/937527.937529"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"crossref","unstructured":"}}\n      \n      S.\n       \n      Vaudenay\n    .\n      \n  \n   \n  Security flaws induced by CBC padding -- applications to SSL IPSEC WTLS... In L. R. Knudsen editor Advances in Cryptology -- EUROCRYPT\n   \n  2002 volume \n  2332\n   of \n  LNCS pages \n  534\n  --\n  545\n  . \n  IACR Springer-Verlag 2002.   }}S. Vaudenay. Security flaws induced by CBC padding -- applications to SSL IPSEC WTLS... In L. R. Knudsen editor Advances in Cryptology -- EUROCRYPT 2002 volume 2332 of LNCS pages 534--545. IACR Springer-Verlag 2002.","DOI":"10.1007\/3-540-46035-7_35"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"crossref","unstructured":"}}D. Whiting R. Housley and N. Ferguson. Counter with CBC-MAC (CCM). Submission to NIST June 2002.  }}D. Whiting R. Housley and N. Ferguson. Counter with CBC-MAC (CCM). Submission to NIST June 2002.","DOI":"10.17487\/rfc3610"}],"event":{"name":"CCS '10: 17th ACM Conference on Computer and Communications Security 2010","location":"Chicago Illinois USA","acronym":"CCS '10","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 17th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866364","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1866307.1866364","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:08:59Z","timestamp":1750248539000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866364"}},"subtitle":["formalizing the malleability of symmetric encryption"],"short-title":[],"issued":{"date-parts":[[2010,10,4]]},"references-count":28,"alternative-id":["10.1145\/1866307.1866364","10.1145\/1866307"],"URL":"https:\/\/doi.org\/10.1145\/1866307.1866364","relation":{},"subject":[],"published":{"date-parts":[[2010,10,4]]},"assertion":[{"value":"2010-10-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}