{"id":"https://openalex.org/W4281852317","doi":"https://doi.org/10.46586/tosc.v2022.i2.379-414","title":"On the Quantum Security of OCB","display_name":"On the Quantum Security of OCB","publication_year":2022,"publication_date":"2022-06-10","ids":{"openalex":"https://openalex.org/W4281852317","doi":"https://doi.org/10.46586/tosc.v2022.i2.379-414"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2022.i2.379-414","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2022.i2.379-414","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9725/9253","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9725/9253","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026122459","display_name":"Varun Maram","orcid":"https://orcid.org/0000-0002-1607-9062"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Varun Maram","raw_affiliation_strings":["Department of Computer Science, ETH Z\u00fcrich, Z\u00fcrich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, ETH Z\u00fcrich, Z\u00fcrich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036524412","display_name":"Daniel Masny","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Daniel Masny","raw_affiliation_strings":["Meta Research, Menlo Park, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Meta Research, Menlo Park, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071719477","display_name":"Sikhar Patranabis","orcid":"https://orcid.org/0000-0002-2309-7939"},"institutions":[{"id":"https://openalex.org/I4210103279","display_name":"IBM Research - India","ror":"https://ror.org/014wt7r80","country_code":"IN","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210103279","https://openalex.org/I4210114115"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sikhar Patranabis","raw_affiliation_strings":["IBM Research, Bangalore, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research, Bangalore, India","institution_ids":["https://openalex.org/I4210103279"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049567046","display_name":"Srinivasan Raghuraman","orcid":null},"institutions":[{"id":"https://openalex.org/I4210148469","display_name":"Visa (United States)","ror":"https://ror.org/05t1y0b59","country_code":"US","type":"company","lineage":["https://openalex.org/I4210148469"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Srinivasan Raghuraman","raw_affiliation_strings":["Visa Research, Palo Alto, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Visa Research, Palo Alto, USA","institution_ids":["https://openalex.org/I4210148469"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4433,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":{"value":0.84289699,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"379","last_page":"414"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6185239553451538},{"id":"https://openalex.org/keywords/quantum","display_name":"Quantum","score":0.5184426307678223},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4902194142341614},{"id":"https://openalex.org/keywords/authenticated-encryption","display_name":"Authenticated encryption","score":0.47309520840644836},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.47041991353034973},{"id":"https://openalex.org/keywords/pseudorandom-permutation","display_name":"Pseudorandom permutation","score":0.43857479095458984},{"id":"https://openalex.org/keywords/permutation","display_name":"Permutation (music)","score":0.41752704977989197},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3610919117927551},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3472796082496643},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.34601303935050964},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.3242000937461853},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.2787155508995056},{"id":"https://openalex.org/keywords/quantum-mechanics","display_name":"Quantum mechanics","score":0.16456878185272217}],"concepts":[{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6185239553451538},{"id":"https://openalex.org/C84114770","wikidata":"https://www.wikidata.org/wiki/Q46344","display_name":"Quantum","level":2,"score":0.5184426307678223},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4902194142341614},{"id":"https://openalex.org/C128619300","wikidata":"https://www.wikidata.org/wiki/Q15263584","display_name":"Authenticated encryption","level":3,"score":0.47309520840644836},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.47041991353034973},{"id":"https://openalex.org/C25818197","wikidata":"https://www.wikidata.org/wiki/Q7255477","display_name":"Pseudorandom permutation","level":4,"score":0.43857479095458984},{"id":"https://openalex.org/C21308566","wikidata":"https://www.wikidata.org/wiki/Q7169365","display_name":"Permutation (music)","level":2,"score":0.41752704977989197},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3610919117927551},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3472796082496643},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34601303935050964},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.3242000937461853},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.2787155508995056},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.16456878185272217},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.46586/tosc.v2022.i2.379-414","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2022.i2.379-414","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9725/9253","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:d7839a47baae4836a7a5a5fe630db800","is_oa":false,"landing_page_url":"https://doaj.org/article/d7839a47baae4836a7a5a5fe630db800","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2022, Iss 2 (2022)","raw_type":"article"},{"id":"pmh:oai:www.research-collection.ethz.ch:20.500.11850/548154","is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/548154","pdf_url":null,"source":{"id":"https://openalex.org/S4306402302","display_name":"Repository for Publications and Research Data (ETH Zurich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I35440088","host_organization_name":"ETH Zurich","host_organization_lineage":["https://openalex.org/I35440088"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, 2022 (2)","raw_type":"info:eu-repo/semantics/article"},{"id":"doi:10.3929/ethz-b-000548154","is_oa":true,"landing_page_url":"https://doi.org/10.3929/ethz-b-000548154","pdf_url":null,"source":{"id":"https://openalex.org/S7407051236","display_name":"ETH Z\u00fcrich Research Collection","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2022.i2.379-414","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2022.i2.379-414","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9725/9253","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6499999761581421,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4281852317.pdf","grobid_xml":"https://content.openalex.org/works/W4281852317.grobid-xml"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W1662048","https://openalex.org/W135872152","https://openalex.org/W931761379","https://openalex.org/W1480477462","https://openalex.org/W1560564685","https://openalex.org/W1650819270","https://openalex.org/W1775977576","https://openalex.org/W1900181948","https://openalex.org/W2084652510","https://openalex.org/W2086590681","https://openalex.org/W2096050004","https://openalex.org/W2125093890","https://openalex.org/W2137005141","https://openalex.org/W2137147061","https://openalex.org/W2139747141","https://openalex.org/W2148132004","https://openalex.org/W2155115217","https://openalex.org/W2171692676","https://openalex.org/W2281849010","https://openalex.org/W2284942299","https://openalex.org/W2294102877","https://openalex.org/W2308119312","https://openalex.org/W2520377568","https://openalex.org/W2592639881","https://openalex.org/W2913851998","https://openalex.org/W2964038092","https://openalex.org/W2969100481","https://openalex.org/W2970243998","https://openalex.org/W2991519650","https://openalex.org/W3029309250","https://openalex.org/W3095037509","https://openalex.org/W3103084439","https://openalex.org/W3104283531","https://openalex.org/W3138313158","https://openalex.org/W3203547317","https://openalex.org/W3211644539","https://openalex.org/W4254706618","https://openalex.org/W4255291600","https://openalex.org/W4406256860"],"related_works":["https://openalex.org/W2346477291","https://openalex.org/W3206541660","https://openalex.org/W2997118956","https://openalex.org/W4253338219","https://openalex.org/W3030772204","https://openalex.org/W2807866490","https://openalex.org/W2325193322","https://openalex.org/W2917426586","https://openalex.org/W3031390999","https://openalex.org/W150432156"],"abstract_inverted_index":{"The":[0],"OCB":[1,82,93,128,176],"mode":[2],"of":[3,45,54,80,92,97,109,113,126,171,175,183],"operation":[4],"for":[5,179],"block":[6,154],"ciphers":[7],"has":[8,28,177],"three":[9],"variants,":[10],"OCB1,":[11],"OCB2":[12,27,137],"and":[13,16,67],"OCB3.":[14],"OCB1":[15],"OCB3":[17],"can":[18],"be":[19,32],"used":[20,142],"as":[21],"secure":[22,140],"authenticated":[23],"encryption":[24,50,188],"schemes":[25],"whereas":[26],"been":[29],"shown":[30,74],"to":[31,48,76,134],"classically":[33],"insecure":[34],"(Inoue":[35],"et":[36,58,63,69,199],"al.,":[37],"Crypto":[38],"2019).":[39],"Even":[40],"further,":[41],"in":[42,94],"the":[43,49,78,81,90,95,105,110,119,123,127,149,152,168,180],"presence":[44,96],"quantum":[46,98,165],"queries":[47],"functionality,":[51],"a":[52,157,185],"series":[53],"works":[55,86],"by":[56,103,197],"Kaplan":[57],"al.":[59,64,70,200],"(Crypto":[60],"2016),":[61],"Bhaumik":[62],"(Asiacrypt":[65,71],"2021)":[66,72],"Bonnetain":[68],"have":[73],"how":[75],"break":[77],"unforgeability":[79,170],"modes.":[83,129],"However,":[84],"these":[85],"did":[87],"not":[88],"consider":[89],"confidentiality":[91],"queries.We":[99],"fill":[100],"this":[101],"gap":[102],"presenting":[104],"first":[106,120],"formal":[107],"analysis":[108,174],"IND-qCPA":[111,124,139],"security":[112,125,182],"OCB.":[114,172],"In":[115],"particular,":[116],"we":[117,131,162],"show":[118],"attacks":[121,166],"breaking":[122,167],"Surprisingly,":[130],"are":[132],"able":[133],"prove":[135],"that":[136,151,190],"is":[138,156],"when":[141],"without":[143],"associated":[144],"data,":[145],"while":[146],"relying":[147],"on":[148],"assumption":[150],"underlying":[153],"cipher":[155],"quantum-secure":[158],"pseudorandom":[159],"permutation.":[160],"Additionally,":[161],"present":[163],"new":[164],"universal":[169],"Our":[173],"implications":[178],"post-quantum":[181],"XTS,":[184],"well-known":[186],"disk":[187],"standard,":[189],"was":[191],"considered":[192],"but":[193],"mostly":[194],"left":[195],"open":[196],"Anand":[198],"(PQCrypto":[201],"2016).":[202]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}