On Some Weaknesses in the Disk Encryption Schemes EME and EME2

Abstract. Tweakable enciphering schemes are a certain type of blockcipher mode of operation which provide security in the sense of a strong pseudo-random permutation. It has been proposed that these types of modes are suitable for in-place disk encryption. Currently there are many proposals available for these schemes. EME is one of the efficient candidate of this category. EME2 is a derivative of EME which is currently one of the candidates of a draft standard for wide block modes by the IEEE working group on storage security. We show some weakness of these two modes assuming that some side channel information is available. Key words: Tweakable Enciphering Schemes, Disc Encryption, Modes of operation, EME

• Type: Journal
• Year: 2009
• Where: ICISS
• Authors: Cuauhtemoc Mancillas-López, Debrup Chakraborty, Francisco Rodríguez-Henríquez
• Keywords: ICISS 2009, In-place Disk Encryption, Information Technology, Strong Pseudo-random Permutation, Tweakable Enciphering Schemes