SIV misuse-resistant AEAD

E437869

authenticated encryption with associated data scheme misuse-resistant AEAD scheme

SIV misuse-resistant AEAD is a cryptographic scheme designed to provide authenticated encryption that remains secure even when nonces are misused or repeated.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (5)

Label	Occurrences
AES-GCM-SIV	2
AES-SIV	2
Deterministic Authenticated-Encryption: A Provable-Security Treatment of the Key-Wrap Problem	2
AES-SIV in RFC 5297	1
SIV misuse-resistant AEAD canonical	1

How this entity was disambiguated

This entity first appeared as the object of triple T4405003 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: SIV misuse-resistant AEAD
Context triple: [Phillip Rogaway, notableWork, SIV misuse-resistant AEAD]

A. Spritz cipher
Spritz cipher is a modern stream cipher and hash function designed by Ronald Rivest and Jacob Schuldt as a more secure and flexible successor to RC4.
B. Carter–Wegman MACs
Carter–Wegman MACs are a family of message authentication codes that use universal hashing combined with a secret key to provide efficient and provably secure authentication.
C. XChaCha20-Poly1305 AEAD construction
XChaCha20-Poly1305 AEAD construction is an authenticated encryption scheme that extends ChaCha20-Poly1305 with a longer nonce for improved security and robustness against nonce reuse.
D. AES-GCM
AES-GCM is an authenticated encryption mode of the Advanced Encryption Standard that provides both data confidentiality and integrity, widely used in modern network and security protocols.
E. Salsa20
Salsa20 is a high-speed stream cipher designed by Daniel J. Bernstein, widely used in modern cryptography for its strong security and efficient software performance.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: SIV misuse-resistant AEAD
Target entity description: SIV misuse-resistant AEAD is a cryptographic scheme designed to provide authenticated encryption that remains secure even when nonces are misused or repeated.

A. Spritz cipher
Spritz cipher is a modern stream cipher and hash function designed by Ronald Rivest and Jacob Schuldt as a more secure and flexible successor to RC4.
B. Carter–Wegman MACs
Carter–Wegman MACs are a family of message authentication codes that use universal hashing combined with a secret key to provide efficient and provably secure authentication.
C. XChaCha20-Poly1305 AEAD construction
XChaCha20-Poly1305 AEAD construction is an authenticated encryption scheme that extends ChaCha20-Poly1305 with a longer nonce for improved security and robustness against nonce reuse.
D. AES-GCM
AES-GCM is an authenticated encryption mode of the Advanced Encryption Standard that provides both data confidentiality and integrity, widely used in modern network and security protocols.
E. Salsa20
Salsa20 is a high-speed stream cipher designed by Daniel J. Bernstein, widely used in modern cryptography for its strong security and efficient software performance.
F. None of above. chosen

Statements (48)

Predicate	Object
instanceOf	authenticated encryption with associated data scheme ⓘ misuse-resistant AEAD scheme ⓘ
advantageOver	traditional AEAD when nonces are repeated ⓘ
basedOn	block cipher primitive ⓘ pseudorandom function ⓘ
comparedTo	standard AEAD modes like AES-GCM ⓘ
component	PRF-based synthetic IV computation ⓘ counter-mode encryption or similar stream-like encryption ⓘ
definedIn	RFC 5297 ⓘ
designFeature	computes IV as a function of key, plaintext, and associated data ⓘ does not require unique nonces for security guarantees ⓘ encryption becomes deterministic for fixed key, plaintext, and associated data ⓘ
hasMode	AES-GCM-SIV ⓘ linked to: SIV misuse-resistant AEAD AES-SIV ⓘ linked to: SIV misuse-resistant AEAD
hasProperty	deterministic encryption ⓘ nonce-misuse resistant ⓘ provides ciphertext integrity ⓘ provides plaintext authenticity ⓘ resists nonce reuse attacks on confidentiality ⓘ resists nonce reuse attacks on integrity ⓘ supports associated data ⓘ
introducedBy	Phillip Rogaway ⓘ Thomas Shrimpton ⓘ
introducedInPublication	Deterministic Authenticated-Encryption: A Provable-Security Treatment of the Key-Wrap Problem ⓘ linked to: SIV misuse-resistant AEAD
introducedInYear	2006 ⓘ
limitation	ciphertexts are not semantically secure against multi-target attacks if plaintexts repeat ⓘ determinism can reveal equality of plaintexts under same key and associated data ⓘ
relatedConcept	deterministic authenticated encryption ⓘ key wrap algorithms ⓘ nonce-based AEAD ⓘ
requires	secret key ⓘ unique key for security proofs ⓘ
securityGoal	authenticated encryption under nonce misuse ⓘ confidentiality of plaintext ⓘ integrity of associated data ⓘ integrity of ciphertext ⓘ
securityModel	IND-CPA-like confidentiality under nonce misuse ⓘ INT-CTXT-like integrity under nonce misuse ⓘ provable security under standard cryptographic assumptions ⓘ
standardizedAs	AES-GCM-SIV in RFC 8452 ⓘ linked to: AES-GCM AES-SIV in RFC 5297 ⓘ linked to: SIV misuse-resistant AEAD
tradeOff	higher computational cost than non-misuse-resistant AEAD ⓘ
useCase	environments where nonce uniqueness cannot be reliably guaranteed ⓘ key wrapping ⓘ protocols with weak or stateful nonce management ⓘ storage encryption ⓘ
usesConstruction	MAC-then-encrypt style design ⓘ synthetic IV ⓘ

How these facts were elicited