Synthesizing chaining modes
While not all chaining modes are natively supported, many can be efficiently supported (including many of the newer authenticated encryption modes). For instance;
- CTS (ciphertext stealing mode): most of the processing for an object just tends to be standard ECB or CBC operations. Its only the processing for the last couple of blocks that needs to be handled differently. [N.B. a useful mode in situations where space preservation is required]
- CCM (Counter with CBC-MAC): just requires two passes; one with CTR modes to encrypt the data and a second with CBC mode to generate the MAC.
- GCM (Galois/Counter Mode) : combines counter mode encryption with Galois field operations for authentication. Accordingly, encryption can be offloaded, while the GHASH function is undertaken in software. Significant performance improvement should be obtained.
- LRW
- EME2
- XTS
Sign up or Log in to add a comment or watch this page.