Multiple encipherment of double-length keys

Definition of the multiple encipherment of a double-length key (*K) using two double-length *KEKs, *KEKa, and *KEKb.

The multiple encipherment of a double-length key (*K) using two double-length *KEKs, *KEKa, and *KEKb is defined as follows:
e*KEKa(KL) || e*KEKb(KR) =
              eKEKaL(dKEKaR(eKEKaL(KL))) ||
              eKEKbL(dKEKbR(eKEKbL(KR)))
where:
  • KL is the left 64 bits of *K
  • KR is the right 64 bits of *K
  • KEKaL is the left 64 bits of *KEKa
  • KEKaR is the right 64 bits of *KEKa
  • KEKbL is the left 64 bits of *KEKb
  • KEKbR is the right 64 bits of *KEKb
  • || means concatenation

Figure 1 illustrates the definition.

Figure 1. Multiple encipherment of double-length keys

Multiple encipherment of double-length keys