University of Luton
The authors present an efficient key wrapping scheme that uses a single wide permutation and does not rely on block ciphers. The scheme is capable of wrapping keys up to 1400 bits long and processing arbitrarily long headers. Their scheme easily delivers the security level of 128 bits or higher with the master key of the same length. The permutation can be taken from the sponge hash functions such as SHA-3 (keccak), quark, photon, spongent. They also present a simple proof of security within the concept of Deterministic Authenticated Encryption (DAE) introduced by the researcher.