The DOI matches its Crossref record, with a small difference in title or year; 8 of the 8 references it cites were found in a registry or an index; none of the 11 sources its claims cite is checked for support yet.
Recommendation for block cipher modes of operation :
Open accessAbstract
Reports on Information Security TechnologyThe Information Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the Nation's measurement and standards infrastructure.ITL develops tests, test methods, reference data, proof of concept implementations, and technical analyses to advance the development and productive use of information technology.ITL's responsibilities include the development of technical, physical, administrative, and management standards and guidelines for the cost-effective security and privacy of sensitive unclassified information in Federal computer systems.This Special Publication 800-series reports on ITL's research, guidance, and outreach efforts in computer security, and its collaborative activities with industry, government, and academic organizations.Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately.Such identification is not intended to imply recommendation or endorsement by the National Institute of Standards and Technology, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose.
Overview
AI snapshot
Written from the paper’s full text.
TL;DR
NIST Special Publication 800-38D specifies Galois/Counter Mode (GCM), an authenticated encryption mode constructed from an approved 128-bit block cipher such as AES, together with its authentication-only specialization GMAC. It defines the algorithms, the critical IV/key uniqueness requirement, and constraints on tag lengths and invocation counts.
Key findings
- GCM combines confidentiality via a variant of Counter mode with authenticity via GHASH, a universal hash over a binary Galois field; input limits are len(P) ≤ 2³⁹−256 bits, len(A) ≤ 2⁶⁴−1 bits, and 1 ≤ len(IV) ≤ 2⁶⁴−1 bits, with all lengths required to be multiples of 8.
- Supported tag lengths are 128, 120, 112, 104, or 96 bits in general; 64- and 32-bit tags are permitted only under Appendix C constraints. For 32-bit tags, a maximum combined ciphertext+AAD of 2⁵ bytes allows 2²² invocations, down to 2¹⁰ bytes allowing 2¹¹ invocations; for 64-bit tags, 2¹⁵ bytes allows 2³² invocations, down to 2²⁵ bytes allowing 2¹⁷ invocations.
- The IV uniqueness requirement states the probability that the authenticated encryption function is ever invoked with the same IV and key on two or more distinct input sets shall be no greater than 2⁻³²; a single repeated IV may expose the implementation to forgery attacks (Joux), and the document says this requirement is "almost as important as the secrecy of the key."
- Unless an implementation uses only 96-bit IVs from the deterministic construction, total invocations of authenticated encryption shall not exceed 2³² across all IV lengths and instances with a given key; a reasonable overall limit of 2⁶⁴ blocks of plaintext and AAD per key is suggested.
Methods
- This is a standards specification, not an empirical study: it defines Algorithms 1–5 (block multiplication over GF(2¹²⁸), GHASH, GCTR, GCM authenticated encryption, and GCM authenticated decryption), with inputs, outputs, steps, diagrams, and summaries.
- It specifies requirements for the underlying block cipher (approved, 128-bit block size, key ≥128 bits, fresh and secret), two IV construction frameworks (deterministic and RBG-based), key establishment, and conformance categories (GCM and GMAC).
- No data, sample, or statistical analysis is reported; the document is normative guidance with appendices summarizing security rationale and short-tag constraints.
Limitations
- Stated: authentication assurance is "strong, but not absolute" — a targeted ciphertext forgery is expected to succeed with probability approximately n/2ᵗ, where n is the total number of blocks in the GHASH encoding of ciphertext and AAD, so GCM is "not well-suited for use with short tag lengths or very long messages," and each successful forgery increases the probability of subsequent ones and leaks information about the hash subkey H.
- Stated: GCM does not inherently prevent replay of a valid authenticated-encryption output; the controlling protocol must monitor IV duplication or incorporate identifying information (e.g., sequence numbers, timestamps) into the AAD.
- Stated: the simplified GHASH in this Recommendation does not obtain all of the properties shown for the designers' definition of GHASH in Ref. [7]; also, security assurance degrades as more data is processed with a single key.
Model-written summary. Check it against the paper before relying on it.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
45 Own interpretation · 11 Sources not found · 10 No basis given
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“In other words, the adversary essentially could control the plaintext output of the authenticated decryption function.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
hedgeddirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Independent of this attack, an adversary may attempt to systematically guess many different tags for a given input to authenticated decryption, and thereby increase the probability that one (or more) of them, eventually, will be accepted as valid.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
hedgedconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“If the output is FAIL, then it is certain that at least one of the given inputs (i.e., the ciphertext, the AAD, the IV, or the tag) is not authentic.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Compliance with this requirement is crucial to the security of GCM.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 8 Uniqueness Requirement on IVs and Keys
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
- Rests on an assumption: The underlying approved block cipher is secure.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Moreover, each successful forgery in this attack 1) increases the probability that subsequent targeted forgeries will succeed, and 2) leaks information about the hash subkey, H.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“The adversary then could easily construct a ciphertext forgery.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
hedgeddirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
In the paper
“For the RBG-based construction of IVs, the above requirement, in conjunction with the requirement that r(i)≥96, is sufficient to ensure the uniqueness requirement in Sec. 8, as follows from the discussion in Ref. [4].”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 8.3 Constraints on the Number of Invocations
What the sources say
- Not matchedcites [4]
Couldn’t be matched to a paper in Crossref, so it can’t be checked.
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
- Not matched
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“In other words, an adversary, i.e., a party without access to the key or to the authenticated encryption function, may be able to produce the correct tag for some triple of ciphertext, AAD, and IV.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
hedgedconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“In other words, GCM, like many other authentication mechanisms, does not inherently prevent an adversary from intercepting the output of an invocation of authenticated encryption and”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plain- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: unclear — It is unclear whether the paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“In the above scenario, knowing the original plaintext that corresponds to the given ciphertext, the adversary can construct the substitute ciphertext in such a way as to correspond to any desired plaintext of the same length.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
- Probably not a substantial claim. 30
- It may state two separate claims as one. 7
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“GCM provides assurance of the confidentiality of data using a variation of the Counter mode of operation for encryption.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 3 Introduction
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
- Rests on an assumption: The underlying approved block cipher is secure.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“The hash subkey, denoted H, is generated by applying the block cipher to the”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 5.3 Primitives for Confidentiality and Authentication
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Compliance with these two requirements implies compliance with the uniqueness requirement on IVs in Sec. 8.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“GCM can also provide authentication assurance for additional data (of practically unlimited length per invocation) that is not encrypted.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 3 Introduction
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
- Rests on an assumption: The underlying approved block cipher is secure.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“As described in Appendix B, the successful verification of the tag within the authenticated decryption function gives assurance of the authenticity of the data; however, the party that presents the input data to the authenticated decryption function may not be the original source of the plaintext and AAD.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plainconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: unclear — It is unclear whether the paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
It may state two separate claims as one.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Each of these functions is relatively efficient and parallelizable; consequently, high-throughput implementations are possible in both hardware and software.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 3 Introduction
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. It may state two separate claims as one.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Consequently, GCM is not well-suited for use with short tag lengths or very long messages.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
It may state two separate claims as one.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“For some voice or video applications, short authentication tags can be appropriate.The forgery of some fraction of the individual authenticated”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plainconditional- Asserted: passes — The authors put it forward as true.
- Checkable: fails — It may be too vague to check against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. It may be too vague to check against evidence. The paper’s conclusions may not depend on it.
In the paper
“The mechanism for the confidentiality of the plaintext within GCM is a variation of the Counter mode [10], with a particular incrementing function, denoted inc 32 , for generating the necessary sequence of counter blocks.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 5.3 Primitives for Confidentiality and Authentication
What the sources say
- Not matchedcites [10]
Couldn’t be matched to a paper in Crossref, so it can’t be checked.
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
- Not matched
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“The secure operation of a cryptographic algorithm depends not only on the proper implementation of the steps of the algorithm, but also on the adherence to the associated requirements.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“In some protocols an adversary may even be able to use data that the verifier itself generated earlier in the protocol.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
hedgedconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“In practice, the requirements in Sec.5.1 should ensure that a key is fresh when it is generated, if the generation mechanism is resistant to tampering.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 8.1 Key Establishment
hedgedconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: fails — The paper may give no reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“The authentication mechanism within GCM is based on a hash function, called GHASHfoot_0 , that features multiplication by a fixed parameter, called the hash subkey, within a binary Galois field.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 5.3 Primitives for Confidentiality and Authentication
plaincorrelational- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“GCM provides stronger authentication assurance than a (non-cryptographic) checksum or error detecting code; in particular, GCM can detect both 1) accidental modifications of the data and 2) intentional, unauthorized modifications.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 3 Introduction
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. It may state two separate claims as one.
- Rests on an assumption: The underlying approved block cipher is secure.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“In effect, the GHASH function calculates X 1 •H m ⊕ X 2 •H m-1 ⊕ ... ⊕ X m-1 •H 2 ⊕ X m •H.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Output: block GHASH H (X).
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“The GCM functions require only the forward direction of the underlying block cipher (i.e., the inverse direction is not required).”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 3 Introduction
plain- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: fails — The paper may give no reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“The • operation on (pairs of) the 2 128 possible blocks corresponds to the multiplication operation for the binary Galois (finite) field of 2 128 elements.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Steps:
plaincorrelational- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“In practice, this requirement is almost as important as the secrecy of the key.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 8 Uniqueness Requirement on IVs and Keys
plaincorrelational- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
- Rests on an assumption: The underlying approved block cipher is secure.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“The GCM functions are”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 3 Introduction
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“If some or all of the additional, non-confidential data is fixed, then the corresponding elements of the GCM authentication mechanism can be pre-computed.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 3 Introduction
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: fails — The paper may give no reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“GHASH is a keyed hash function but not, on its own, a cryptographic hash function.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 5.3 Primitives for Confidentiality and Authentication
plain- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. It may state two separate claims as one.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“For GCM, the requirement in Sec.5.2.1 for the uniqueness of the IVs is almost as important, although not as obvious.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plaincorrelational- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“If the output is the plaintext, then the design of the mode provides strong, but not absolute, assurance that the purported source of the data created the tag, i.e., that the plaintext and the AAD (and the IV and the tag) are authentic.Consequently, the mode also provides strong assurance that this information was not subsequently altered, either intentionally or unintentionally.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
boostedconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
It may state two separate claims as one.
In the paper
“For example, GCM keys may be established using the key derivation functions of the following protocols as allowed in [9]: Transport Layer Security, Internet Key Exchange v1 and v2, and Secure Shell.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 8.1 Key Establishment
What the sources say
- Not matchedcites [9]
Couldn’t be matched to a paper in Crossref, so it can’t be checked.
hedgedconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
- Not matched
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“The authenticity of the protected data can be verified independently from the recovery of the confidential data from its encrypted form.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 3 Introduction
plain- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: fails — The paper may give no reason why it holds.
Probably not a substantial claim. The paper may give no reason why it holds.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“GCM does not employ the inverse cipher function.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 5.1 Block Cipher
plain- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Eventually, H may be compromised entirely, with consequences as described at the end of Appendix A: the authentication assurance is completely lost.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
hedgedconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
It may state two separate claims as one.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“As with any tag-based authentication mechanism, if the adversary chooses a t-bit tag at random, it is expected to be correct for given data with probability 1/2 t .”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plain- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“If the unique initialization string is predictable, and the length of the confidential data is known, then the block cipher invocations within the GCM encryption mechanism can be pre-computed.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 3 Introduction
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: fails — The paper may give no reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Moreover, as with most block cipher modes of operation, the security assurance of GCM degrades as more data is processed with a single key.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 10 Conformance
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“The creation of an authentication tag by the authenticated encryption function provides the mechanism whereby assurance of the authenticity of the plaintext and AAD (and IV) can be obtained upon the execution of the authenticated decryption function.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > Additional information
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: passes — The paper’s conclusions depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“One potential advantage of the RBG-based construction is that the RBG may be designed to recover from a loss of power in a straightforward manner, i.e., without requiring action from the IT professional that maintains the system.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 9.1 Design Considerations
hedgedconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Compliance with the uniqueness requirement on IVs, and hence the security of GCM, ultimately depends on the IT professional who configures, deploys, and maintains the GCM modules within a particular system.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 9.2 Operational Considerations
plaindirect- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: fails — The paper may give no reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“For the deterministic construction, all of the deterministic elements that are necessary to construct the IV would have to be available when power is restored.”
§ Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC > 9.1 Design Considerations
hedgedconditional- Asserted: passes — The authors put it forward as true.
- Checkable: passes — It can be checked against evidence.
- Load-bearing: fails — The paper’s conclusions may not depend on it.
- Based: passes — The paper gives a reason why it holds.
Probably not a substantial claim. The paper’s conclusions may not depend on it.
The paper relies on this without support.
The underlying approved block cipher is secure.
“GCM is constructed from an approved symmetric key block cipher with a block size of 128 bits, such as the Advanced Encryption Standard (AES) algorithm that is specified in Federal Information Processing Standard (FIPS) Pub.197 [2].”
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“To eliminate the risk of nonce reuse, the framework employs a stochastic generation approach compliant with NIST SP 800-38D guidelines (Dworkin, 2007).”
From A high-throughput AES-GCM implementation on GPUs for secure, policy-based access to massive astronomical catalogs (2026) · cites this paper as Dworkin, 2007
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Archives approaching N ∼ 2 32 files per key fall into the regime where NIST SP 800-38D §8.3 recommends key rotation; our framework supports this through the explicit key reference required by every encryption operation.”
From A high-throughput AES-GCM implementation on GPUs for secure, policy-based access to massive astronomical catalogs (2026) · cites this paper as Dworkin, 2007
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Third, standardization: AES-GCM is specified by NIST SP 800-38D (Dworkin, 2007) as an approved AEAD mode, whereas CTR + HMAC, although built from approved primitives, is not itself a standardized AEAD construction.”
From A high-throughput AES-GCM implementation on GPUs for secure, policy-based access to massive astronomical catalogs (2026) · cites this paper as Dworkin, 2007
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“The framework implements the AES-128-GCM standard (Dworkin, 2007).”
From A high-throughput AES-GCM implementation on GPUs for secure, policy-based access to massive astronomical catalogs (2026) · cites this paper as Dworkin, 2007
The cited source says what the claim attributes to it.
In the citing paper
“The security of the AES-GCM mode relies strictly on the uniqueness of the initialization vector for a given key.”
From A high-throughput AES-GCM implementation on GPUs for secure, policy-based access to massive astronomical catalogs (2026) · cites this paper as Dworkin, 2007
Citations
Cites
THE ADVANCED ENCRYPTION STANDARD
Stallings, W. (2002) · Cryptologia · doi:10.1080/0161-110291890876 · Cited by 770
Recommendation for block cipher modes of operation: methods and techniques
Dworkin, M. J. (2001) · doi:10.6028/nist.sp.800-38a · Cited by 746
Self-citationThe Security and Performance of the Galois/Counter Mode (GCM) of Operation
McGrew, D. A., & Viega, J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-30556-9_27 · Cited by 530 · cited 1×
“[7] gives a detailed treatment of the security properties of GCM.”
BackgroundSecurity Requirements for Cryptographic Modules
Daley, W. M., Shavers, C., & Kammer, R. G. (1999) · Defense Technical Information Center (DTIC) · Cited by 405
The Galois/Counter Mode of Operation (GCM)
McGrew, D. A., & Viega, J. (2005) · Cited by 332
Security Requirements for Cryptographic Modules
National Institute of Standards and Technology (US) (2019) · Federal Information Processing Standards Publication (FIPS PUB) 140-3 · doi:10.6028/nist.fips.140-3 · Cited by 118
The Advanced Encryption Standard (AES)
Paar, C., & Pelzl, J. (2009) · Springer eBooks · doi:10.1007/978-3-642-04101-3_4 · Cited by 80
Research works printed but not linked: 1
- IEEE P1619.1™/D23, Draft Standard for Authenticated Encryption with Length Expansion for Storage Devices.
Cited by
Sorted by citations
Items 401–464 of 464
EVALUATING THE EFFECTIVENESS OF COMBINED CRYPTOGRAPHIC SCHEMES IN SECURING WI-FI CONNECTIONS
Shcheblanin, Y., & SKYDAN, D. (2025) · Information systems and technologies security · doi:10.17721/ists.2025.10.37-43
Diri, S., & Kayapınar, Ö. B. (2026) · International Conference on Artificial Intelligence, Computer, Data Sciences and Applications (ACDSA) · doi:10.1109/acdsa67686.2026.11468255
IoTLS 2.0: How Far Has IoT Industry Come in Securing Communications with TLS?
Gupta, C., Guldali, N., & Damie, M. (2026) · doi:10.1145/3803525.3804979
Accelerating Next-Gen Network Security: High-Throughput AES-GCM on Modern Data Center GPUs
Swargam, M., Manjunatha, P. C., & Alawneh, S. G. (2026) · Proceedings of IEEE Southeastcon · doi:10.1109/southeastcon63549.2026.11476224
“As mentioned by Dworkin in [3], GCM combines one of the AES mode of operation CTR mode of encryption with the new Galois Mode of Authentication.”
InfluentialComparing SOME ALGORITHMS for encryption and decryption audio files
Khaled, H. W., Araheem, W. A., & Mhaibes, H. I. (2026) · doi:10.1145/3797491.3797502
Random-Access AEAD for Fast Lightweight Online Encryption
Fábrega, A., Len, J., Ristenpart, T., et al. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-25333-0_10
DILISAES: An Experimental Lattice-Based Post-quantum Signcryption Scheme
Borhan, R., Taenaka, Y., & Kadobayashi, Y. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-17443-7_8
AI-Enhanced AES Encryption for Kurdish Unicode Texts
Abduljabbar, Z. H. (2026) · Dasinya Journal for Engineering and Informatics · doi:10.65542/djei.v2i2.39
“At the same time, the authentication Tag (T) is computed from the GHASH process, which links together the integrity of all the (AAD) and (C) blocks [30].”
Lestari, A. A., Suryadi, M., Ramli, K., et al. (2026) · IIUM Engineering Journal · doi:10.31436/iiumej.v27i2.4405
PUE Schemes: Efficient Updatable Encryption With Robust Security From Symmetric Primitives
Weninger, A., & Andreeva, E. (2026) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3779208.3785273
Privacidade Seletiva via ECIES em Arquitetura Híbrida para Registro de Dados Ambientais
da Silva, J. G. B., de Souza, D. F. L., Neves, T. T. D. A. T., et al. (2026) · doi:10.5753/wblockchain.2026.22917
“…acordo com a documentac¸˜ao da biblioteca, a protec¸˜ao da mensagem ´e realizada com Advanced Encryption Standard - Galois/Counter Mode (AES-GCM), de modo que confidencialidade e autenticidade sejam providas por uma ´unica primitiva de criptografia autenticada com dados associados [Dworkin 2007].”
CrimeIntel Companion: A Tamper-Proof Mobile Framework for AI-Driven Crime Scene Investigation
Bang, H., Baldava, K., Sharma, A., et al. (2026) · doi:10.1109/icici68867.2026.11564998
A Fine-Grained Prompt Protection Framework for Privacy-Preserving LLM Inference
Zhang, B., Xiao, B., Zhao, K., & Lei, H. (2026) · International Symposium on Computer Technology and Information Science (ISCTIS) · doi:10.1109/isctis70043.2026.11572452
HOURS: Lightweight, Orchestrated Security for UAV Swarm Telemetry
El-Hadedy, M. (2026) · IEEE International Conference on Pervasive Computing and Communications Workshops and other Affiliated Events (PerCom Workshops) · doi:10.1109/percomworkshops68308.2026.11585397
“Provenance: the AES-GCM baseline is obtained by swapping the AEAD to the RustCrypto aes-gcm crate and re-running the identical harness; AES-GCM is standardized in NIST SP 800-38D [13], and both AEADs are from RustCrypto [8].”
AES-iGCM : Enabling Fine-Grained TLS Inspection via Split Encryption–Authentication Keys
Tang, X., Chen, R., Xie, W., et al. (2026) · doi:10.1109/iicc69623.2026.11582448
“Unfortunately, the TLS 1.3 protocol restricts the use of only AEAD algorithms [1], among which AEAD algorithms represented by AES-GCM [8] have become the most widely adopted choice due to its high performance and security.”
InfluentialSecureVault: A Zero-Knowledge Password Manager with Blockchain-Anchored Integrity
Dhama, R., Mittal, S., Wazid, M., et al. (2026) · Procedia Computer Science · doi:10.1016/j.procs.2026.06.037
SA-aChain: A Blockchain Hybrid Architecture for Privacy-Preserving Alert Data Management
Xia, X., Xu, L., Gai, K., & Zhu, L. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-16168-0_8
DTSM: Digital Twin-Enabled Secure Multicast Signcryption Protocol for Low-Altitude UAV Networks
Liu, L., Cao, J., Ma, R., Deng, B., Li, G., Zhang, Y., & Li, H. (2026) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2026.3713051
“FollowingNISTSP800-38D[52] exhibits significant advantages, particularly when the number of receivers is large.”
Tight Multi-user Security of CCM and Enhancement by Tag-Based Key Derivation
Naito, Y., Sasaki, Y., & Sugawara, T. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-32560-0_8
Duan, Z., Wu, X., & Zhang, L. (2026) · International Conference on Artificial Intelligence, Big Data and Algorithms (CAIBDA) · doi:10.1109/caibda70336.2026.11621141
Toward Secure Decentralized Coordination and Acoustic Source Localization in Autonomous Drone SwarmsPreprint
Shagor, M. S. I. (2026) · Research Square · doi:10.21203/rs.3.rs-10530148/v1
Yang, S. (2026) · The Journal of Korean Institute of Information Technology · doi:10.14801/jkiit.2026.24.7.161
LÆGIS: Pinpointing and Addressing Performance Overheads of GPU-Based Confidential Computing
Yang, Y., & Jog, A. (2026) · Proceedings - International Symposium on Computer Architecture/Proceedings · doi:10.1109/isca66397.2026.00046
“It uses the NIST-standard IV length [14]: each VABlock is assigned an IV from a unique 19-bit ID and a 77-bit RV.”
InfluentialIroKnight: Ownership-Preserving Neural Acceleration for Inference Serving
Santhanam, H., Rajan, A. R. A., & Esmaeilzadeh, H. (2026) · Proceedings - International Symposium on Computer Architecture/Proceedings · doi:10.1109/isca66397.2026.00087
Permutation-Based Hash from Non-Idealized Assumptions: Adding Feed-Forward to Sponge
Guo, C., Hu, K., Jiang, S., et al. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-35412-9_3
Key Committing Security of HCTR2, Revisited
Chang, D., Chen, Y. L., Hiraga, Y., et al. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-35412-9_4
“For the attack on EtE A - HCTR2 with τ 3 -bit complexity, we target τ = 96 bits, which is a tag length supported by AES - GCM in NIST SP800-38D [15], and the entire computation ends in 652 seconds.”
UCX is All You Need: A Universal Transform for Committing Authenticated Encryption
Mihir Bellare, Y., Ranjan, R., Senan, N., et al. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-35412-9_7
A Lightweight Hybrid Encryption Architecture for High-Telemetry Constrained IoT Devices
Zahid, Z., Ali, H., Naeem, A., et al. (2026) · Signal Processing and Communications Applications Conference (SIU) · doi:10.1109/siu71813.2026.11636899
“(4), payloads remain IND-CPA secure for σ ≪ 2 64 with K M uncompromised, at N ≤ 1000 the GCM nonce bound of 2 32 [13] is not approached.”
Sonkar, D. K., Singh, S., & Yadav, A. S. (2026) · Journal of Signal Processing Systems · doi:10.1007/s11265-026-02009-5
“During enrollment, the compressed biometric template ( D u , based on OMP) is serialized in binary format (e.g.,.pkl) and protected by AES-GCM authenticated encryption, which provides both confidentiality and integrity [ 34].”
Fazio, A. (2026) · Springer eBooks · doi:10.1007/978-3-032-30243-4_9
When We Talk Morse: Lightweight Parameter Encoding for Secure Federated Learning
Nguyen, H. M., Ghaffari, A., & Lovén, L. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-35576-8_24
Khegay, V., Aldosh, B., Lisnevskyi, R., et al. (2026) · doi:10.1109/iccsdfai70505.2026.11648064
“The encryption proceeds according to the standard AES-GCM construction [10].”
Musa, M. A., & AL-Taharwa, I. A. (2026) · IEEE Jordan Conference on Applied Electrical Engineering and Computing Technologies · doi:10.1109/aeect69724.2026.11657883
Karahan, M., & Barın, A. S. (2026) · IntechOpen eBooks · doi:10.5772/intechopen.1017586
SAOKD: Server-Assisted Oblivious Key Distribution for Resource-Constrained, Post-Quantum IoT Devices
Alqattan, A., Mahdi, M., & Dimitriou, T. D. (2026) · International Conference on Distributed Computing in Smart Systems and the Internet of Things (DCOSS-IoT) · doi:10.1109/dcoss-iot69657.2026.00038
El-Din, O. M. A. A., Hanafy, O. H., Salem, A. M. E.-F., et al. (2026) · Applied Sciences · doi:10.3390/app16178609
Shagor, M. S. I. (2026) · Research Square · doi:10.21203/rs.3.rs-10891677/v1
Muttaki, F., Sahi, A., & Abdulla, S. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6050154
“Consequently, AES-256 remains a robust conventional symmetric cipher, and Galois/Counter Mode (GCM) guarantees authenticated encryption if nonces and keys are handled correctly [5,6].”
BB84 with ML-KEM Decapsulation-Failure-Based Security Parameters
Nikula, S., & Muurman, M. (2026) · Cryptography · doi:10.3390/cryptography10050064
“The shared secret key can then be used in symmetric-key cryptography or authentication, a typical choice being an authenticated encryption scheme such as Advanced Encryption Standard in Galois Counter Mode (AES-GCM) [17].”
Stașac, F. G., Győrödi, C. A., & Győrödi, R. Ș. (2026) · Applied Sciences · doi:10.3390/app16178889
Lestari, A. A., Suryadi, M., Ramli, K., et al. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6050157
“…Special Publication SP 800-38D [4] caps Galois/Counter Mode (GCM) to at most 2 32 authenticated-encryption invocations per key, because security assurance degrades as more data is processed under a single key [4]; the underlying birthday-collision analysis is formalised in Luykx and Paterson [3].”
InfluentialProof-carrying payloads: End-to-end authorization for Pub/Sub messaging
Galletta, L. (2026) · Journal of Logical and Algebraic Methods in Programming · doi:10.1016/j.jlamp.2026.101173
JaiShankar, A. G., Shankaramma, P, H. V., et al. (2026) · doi:10.1109/etcc69750.2026.11681950
“Dworkin [13] defined AES-GCM, providing authenticated encryption and integrity verification in one operation.”
Shagor, M. S. I. (2026) · Research Square · doi:10.21203/rs.3.rs-11073218/v1
Finite-field audio encryption based on nonlinear modular recurrence and recursive diffusion
Jimona, J. J., & Perumal, R. (2026) · Multimedia Tools and Applications · doi:10.1007/s11042-026-21931-1
Shintre, A., & Khedkar, S. (2026) · IEEE International Conference on Instrumentation (INSTCon) · doi:10.1109/instcon69741.2026.11691919
DNDK192: A 192-Bit Variant of DNDK-GCM
Gueron, S. (2026) · Advances in intelligent systems and computing · doi:10.1007/978-3-032-27214-0_11
ES-AKA: An enhanced secure authentication and key agreement protocol for 5G and non-3GPP IoT access
Shahriari, B., Öz, G., & Ulusoy, A. H. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112812
Post-Quantum Key Encapsulation Mechanism Based on the McEliece-RRNS Cryptosystem
Васильович, Я. В., Ivasiev, S., ЯЦКІВ, Н., Kulyna, S., Schuchmann, V. A., & Tsavolyk, T. (2026) · International Conference on Advanced Computer Information Technologies (ACIT) · doi:10.1109/acit69831.2026.11700075
Wei, L., Zhu, H., Meng, X., et al. (2026) · Mobile Networks and Applications · doi:10.1007/s11036-026-02556-y
A web based Vigenère cipher demonstrator for text and document processing
Dhany, G. R. D. (2023) · MULTICA SCIENCE AND TECHNOLOGY (MST) · doi:10.47002/s0s6e155
Hybrid Encryption and Stenography System
Florence, M. L., Bharathi, A. I., Renuka, N., et al. (2026) · Computer Science Engineering and Technology · doi:10.46632/cset/4/3/5
Haddad, A., Habaebi, M. H., & Husaini, M. A. S. A. (2026) · Applied Sciences · doi:10.3390/app16199851
Neelakantan, P., Jaladi, S., Vardhan, M. I., et al. (2026) · International Conference on Emerging Techniques in Computational Intelligence (ICETCI) · doi:10.1109/icetci71772.2026.11710704
Hammood, H. L., Hussein, H. I., Jameel, J. S., Bash, H. A., & Abedi, F. (2026) · Multimedia Tools and Applications · doi:10.1007/s11042-026-21949-5
Koushik, M. B., Sri, G. H., Khan, P. S., Nikhilesh, A., & Alam, J. (2026) · International Conference on Emerging Techniques in Computational Intelligence (ICETCI) · doi:10.1109/icetci71772.2026.11710648
“Modern cryptosystems, such as AES, provide stringent theoretical assurances for confidentiality and consistency [2]; however, in practice, the secure exchange of information relies more on the efficacy of design choices within the entire system than on the robustness of the cryptosystem itself [3].”
Mthokozisi¹, K., Blair¹, O. T., Jjunju¹, F. P. M., et al. (2026) · Research Square · doi:10.21203/rs.3.rs-11075198/v1
PROTECTION OF WI-FI NETWORKS USING AN ADAPTIVE ENCRYPTION METHOD
SKYDAN, D., & Shcheblanin, Y. (2026) · Cybersecurity Education Science Technique · doi:10.28925/2663-4023.2026.34.1261
AI Based Secure Text and Audio Communication Using Image Steganography
B, B. S. R., Kumuthaveni, R., & Sofia, A. S. (2026) · International Journal of Scientific Research in Computer Science Engineering and Information Technology · doi:10.32628/cseit2612549
Proteção de Identificadores em Beacons BLE contra Escuta Passiva usando ESP32 e Android
Costa, E., Barreto, R., Maia, M., & Monteiro, A. (2026) · Simpósio Brasileiro de Cibersegurança (SBSeg) · doi:10.5753/sbseg_estendido.2026.29356
Talware, C., Abraham, J., & Padulkar, D. M. (2026) · doi:10.1109/ictest69239.2026.11722896
汪, 思. (2026) · Software Engineering and Applications · doi:10.12677/sea.2026.155066
(2016) · IACR Cryptology ePrint Archive · Cited by 1,288
Metadata
- Authors
- Dworkin, M. J.
- Published
- 2007
- OpenAlex
- W2727655671
- Semantic Scholar
- e140766a2342c14037d83524d339e500e812589f
- Cited by
- 463
- References
- 8
- Citations by year
- 2026: 80 · 2025: 31 · 2024: 25 · 2023: 27 · 2022: 19 · 2021: 28 · 2020: 27 · 2019: 33 · 2018: 24 · 2017: 24 · 2016: 18 · 2015: 29 · 2014: 27 · 2013: 13 · 2012: 15
- Type
- report
- Language
- en
- Open access
- gold
- doi.org
- Licence
- public-domain
- Funders
- Government of Canada
- National Institute of Standards and Technology
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Physical Sciences › Mathematics › Discrete Mathematics and Combinatorics › Coding theory and cryptography
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Keywords
- block cipher, modes of operation, cryptographic standards, block cipher modes of operation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
A language model drew the claims from the paper on 2026-10-20, under version 3 of the claim definition (model deepseek-v4.1-flash, prompt extract-v3).
A second model labelled each claim on 2026-10-20 (model jev-1.13-20260917, definition revision gold-guideline-v0.2).
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
