A weakness in OCB3 used with short nonces allowing for a break of authenticity and confidentiality

Summary: OCB3 is the final version of a blockcipher mode for authenticated encryption, proven to be secure up to the birthday bound assuming a secure underlying blockcipher. The scheme's software performance has been studied by comparing its speed on multiple platforms to other AE schemes, and a reflection on the history and development of the mode has been provided.