[cryptography] "Combined" cipher modes

Florian Weimer fw at deneb.enyo.de
Mon Feb 20 15:40:24 EST 2012

* Kevin W. Wall:

> So my first question: Are there ANY "combined" cipher modes
> for block ciphers that do not cause the ciphers to act as a key
> stream? (That seems to be cause most of the ones I found build
> the confidentiality piece around CTR mode.) If "yes", please name
> a few (especially those with no patent restrictions).

There's draft-mcgrew-aead-aes-cbc-hmac-sha1.  It's expired, and there
are no test vectors.

More information about the cryptography mailing list