本文档指定了一种适用于需要轻量级加密机制的应用程序的认证加密方法。 此方法处理具有以下安全目标的数据字符串: a） 数据保密，即防止未经授权披露数据， b） 数据完整性，即使数据接收方能够验证其未被修改的保护。 可选地，此方法可以提供数据源身份验证，即使数据接收方能够验证数据发起人的身份的保护。 本文档中指定的方法基于轻型流密码，并要求受保护数据的各方共享此算法的密钥。 密钥管理超出了本文档的范围。 注意了吗ISO/IEC 11770系列中定义了关键管理技术。

This document specifies one method for authenticated encryption suitable for applications requiring lightweight cryptographic mechanisms. This method processes a data string with the following security objectives: a) data confidentiality, i.e. protection against unauthorized disclosure of data, b) data integrity, i.e. protection that enables the recipient of data to verify that it has not been modified. Optionally, this method can provide data origin authentication, i.e. protection that enables the recipient of data to verify the identity of the data originator. The method specified in this document is based on a lightweight stream cipher, and requires the parties of the protected data to share a secret key for this algorithm. Key management is outside the scope of this document. NOTE      Key management techniques are defined in the ISO/IEC 11770 series.