MMM: Authenticated Encryption with Minimum Secret State for Masking

Abstract: We propose a new authenticated encryption (AE) mode MMM that achieves the minimum memory size with masking. Minimizing the secret state is the crucial challenge in the low-memory AE suitable for masking. Here, the minimum secret state is s + b bits, composed of s bits for a secret key and b bits for a plaintext block. HOMA appeared in CRYPTO 2022 achieved this goal with b = 64, but choosing a smaller b was difficult because b = s/2 is bound to the block size of the underlying primitive, meaning that a block cipher with an unrealistically small block size (e.g., 8 bits) is necessary for further improvement. MMM addresses the issue by making b independent of the underlying primitive while achieving the minimum (s + b)-bit secret state. Moreover, MMM provides additional advantages over HOMA, including (i) a better rate, (ii) the security under the multi-user model, (iii) and a smaller transmission cost. We instantiate two variants, MMM-8 (with b = 8) and MMM-64 (with b = 64), using th.... https://tches.iacr.org/index.php/TCHES/article/view/11159

Object Details

• Location: Deutsche Nationalbibliothek Frankfurt am Main
• Extent: Online-Ressource
• Language: Englisch

References and Relationships

• Bibliographic citation: MMM: Authenticated Encryption with Minimum Secret State for Masking ; volume:2023 ; number:4 ; year:2023 ; IACR transactions on cryptographic hardware and embedded systems ; 2023, Heft 4 (2023)

Contributors, Places and Time

• Creator: Naito, Yusuke ; Sasaki, Yu ; Sugawara, Takeshi

Further information

• DOI: 10.46586/tches.v2023.i4.80-109
• URN: urn:nbn:de:101:1-2023102518583937444490
• Rights: Open Access; Der Zugriff auf das Objekt ist unbeschränkt möglich.
• Last update: 14.08.2025, 10:49 AM CEST