Serge Vaudenay, Damian Vizár, Reza Reyhanitabar
In conventional authenticated-encryption (AE) schemes, the ciphertext expansion, a.k.a.stretch or tag length, is a constant or a parameter of the scheme that must be fixed per key. However, using variable-length tags per key can be desirable in practice or ...
Springer-Verlag Berlin2016