A Critique of CCM

A Critique of CCM

P. Rogaway and D. Wagner

Abstract. CCM is a conventional authenticated-encryption scheme obtained from a 128-bit block cipher. The mechanism has been adopted as the mandatory encryption algorithm in an IEEE 802.11 draft standard [15], and its use has been proposed more broadly [16,17]. In this note we point out a number of limitations of CCM. A related note provides an alternative to CCM [5].

Contact author: daw@cs.berkeley.edu

Available formats: Postscript (PS) | PDF |