We describe OCB3, the final version of OCB, a blockcipher mode for authenticated encryption (AE). We prove the construction secure, up to the birthday bound, assuming its underlying blockcipher is secure as a strong-PRP. We study the scheme’s software performance, comparing its speed, on multiple platforms, to a variety of other AE schemes. We reflect on the history and development of the mode.

中文翻译：

---

OCB 的设计和演进

我们描述了 OCB3，OCB 的最终版本，一种用于认证加密 (AE) 的分组密码模式。我们证明构造安全，直到生日界限，假设其底层分组密码作为强 PRP 是安全的。我们研究了该方案的软件性能，将其在多个平台上的速度与各种其他 AE 方案进行了比较。我们反思这种模式的历史和发展。