The recent selection of the AES block cipher to replace DES has generated interest in developing new modes of operation to
supplement the modes defined as part of the DES standard [1,16,23]. We initiate the study of modes of encryption which are both incremental and unforgeable, and point out a number of applications for modes meeting these requirements. We also propose three specific modes achieving
these goals, and discuss the strengths and weaknesses of each.