| 摘要 |
The present invention achieves one-pass, one-rate authenticated encryption, said authenticated encryption being such that parallel processing is possible and overall encryption and decryption can be carried out with only one encryption function. An authenticated encryption device is provided with an authenticated encryption means for generating ciphertext or decrypted plaintext by applying, to plaintext or ciphertext that has been input, a two-round Feistel structure in which for every two blocks, an encryption function having a tweak inserted therein is used as a round function. When, for example, the plaintext is divided into two-block chunks, the authenticated encryption means determines the ciphertext chunk (CC[i] = (C[i_1], C[i_2])) corresponding to an i |
