Synthetic Initialization Vector (SIV) Authenticated Encryption Using the Advanced Encryption Standard (AES)

This memo describes SIV, a block cipher mode of operation. SIV takes akey, a plaintext, and multiple variable-length octet strings whichwill be authenticated but not encrypted. It produces a ciphertexthaving the same length as the plaintext and a synthetic initializationvector. Depending on how it is used, SIV achieves either the goal ofdeterministic authenticated-encryption or the goal of nonce-based,misuse-resistant authenticated-encryption.