You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
One thing worth noting is that tweak changes aren't necessarily free (some constructions even use tweak-dependent keys for the underlying block cipher), and an interface that can amortize this may be beneficial.
EDIT: Optimally Secure Tweakable Blockciphers may be of interest; it shows tweakable block cipher constructions that can break the birthday bound, though they make use of tweak-dependent keys.
EDIT 2: Even in LRW2, the construction works as Ẽ(k, t, m) = E(k, m ^ h(t)) ^ h(t) - precomputing h(t) may have nontrivial benefit.
Recently added Threefish is a tweakable block cipher, thus we need an appropriate trait for it.
Currently I am thinking of using this:
In addition to it I think tweakable ciphers should auto implement
BlockCipher
using zero tweak.The text was updated successfully, but these errors were encountered: