CWC mode explained

In cryptography, CWC Mode (Carter–Wegman + CTR mode) is an AEAD block cipher mode of operation that provides both encryption and built-in message integrity, similar to CCM and OCB modes. It combines the use of CTR mode with a 128-bit block cipher for encryption with an efficient polynomial Carter–Wegman MAC with a tag length of at most 128 bits and is designed by Tadayoshi Kohno, John Viega and Doug Whiting.[1]

CWC mode was submitted to NIST[2] for standardization, but NIST opted for the similar GCM mode instead.[3]

Although GCM has weaknesses compared to CWC,[4] the GCM authors successfully argued for GCM.[5]

CWC allows the payload and associated data to be at most 232 - 1 blocks or nearly 550 GB.

References

  1. Book: https://link.springer.com/chapter/10.1007/978-3-540-25937-4_26 . 10.1007/978-3-540-25937-4_26 . 9783540259374 . Lecture Notes in Computer Science . 2004 . 408–426 . Kohno . Tadayoshi . Viega . John . Whiting . Doug . Fast Software Encryption . CWC: A High-Performance Conventional Authenticated Encryption Mode . 3017 .
  2. Web site: August 30, 2017 . NIST.gov - Computer Security Division - Computer Security Resource Center . dead . https://web.archive.org/web/20170830120738/http://csrc.nist.gov/groups/ST/toolkit/BCM/modes_development.html . 2017-08-30.
  3. Web site: Modes Development - Block Cipher Techniques | CSRC | CSRC . 4 January 2017 .
  4. Web site: 2005-05-20 . Authentication weaknesses in GCM .
  5. Web site: May 31, 2005 . GCM Update .

External links

This article is licensed under the GNU Free Documentation License. It uses material from the Wikipedia article "CWC mode".

Except where otherwise indicated, Everything.Explained.Today is © Copyright 2009-2026, A B Cryer, All Rights Reserved. Cookie policy.