CCM
E663912
CCM is an authenticated encryption mode for block ciphers that combines counter mode encryption with CBC-MAC for data integrity and confidentiality.
Statements (44)
| Predicate | Object |
|---|---|
| instanceOf | authenticated encryption mode ⓘ |
| category | symmetric-key cryptography ⓘ |
| commonlyUsedIn |
IEEE 802.11i (WPA2)
NERFINISHED
ⓘ
wireless network security ⓘ |
| definedBy | NIST NERFINISHED ⓘ |
| designedFor | resource-constrained environments ⓘ |
| encryptionMode | CTR ⓘ |
| errorHandling | rejects ciphertext on tag mismatch ⓘ |
| fullName | Counter with CBC-MAC NERFINISHED ⓘ |
| hasComponent |
CBC-MAC authentication
ⓘ
CTR encryption ⓘ |
| hasLimitation | requires full message before processing ⓘ |
| is | deterministic given key and nonce ⓘ |
| MACComputedOver | ciphertext and associated data ⓘ |
| MACMode | CBC-MAC over block cipher ⓘ |
| nonceLength | variable within specified range ⓘ |
| operatesOn | block cipher ⓘ |
| protects |
message authenticity
ⓘ
message confidentiality ⓘ message integrity ⓘ |
| providesProperty |
authentication
ⓘ
confidentiality ⓘ data integrity ⓘ |
| relatedTo |
EAX
NERFINISHED
ⓘ
GCM NERFINISHED ⓘ |
| requires |
fixed block size cipher such as AES
ⓘ
unique nonce per key ⓘ |
| securityDependsOn | underlying block cipher security ⓘ |
| standardizedIn | NIST SP 800-38C NERFINISHED ⓘ |
| supports |
associated data
ⓘ
variable-length messages ⓘ |
| tagLength | configurable ⓘ |
| tagLengthOptions |
104 bits
ⓘ
112 bits ⓘ 120 bits ⓘ 128 bits ⓘ 32 bits ⓘ 64 bits ⓘ 96 bits ⓘ |
| typicallyUsedWith | AES NERFINISHED ⓘ |
| usesConstruction | encrypt-then-MAC ⓘ |
| usesEncryptionMode | counter mode ⓘ |
| usesMACMode | CBC-MAC ⓘ |
| verificationProcess | recompute and compare authentication tag ⓘ |
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.
subject surface form:
Galois/Counter Mode