... and this OCH (https://t.co/is9yVyuu8c) employs "half-checksum" method of SAC 2019 (https://t.co/5fbXdg85Uv) to reduce the state size of OCB-like AEs. Happy to see that.
The OCH authenticated encryption mode uses Areion (https://t.co/sr1oQtP4OH) as the primitive. The proposal paper published at CCS 2025 and received a distinguished paper award.