Trivial Nonce-Misusing Attack on Pure OMD.
Tomer Ashur, Bart Mennink · 2015
Abstract. Pure OMD is an authenticated encryption mode that will be presented by Rey-hanitabar et al. at FSE 2015. It is (among others) claimed to achieve authenticity against nonce-misusing adversaries. We show that this claim is incorrect, by presenting an adversary that makes 3 queries (including the forgery) of a total complexity 6. 1