Acronyms

Acronym Description

Acronym	Description
AD	Associated Data
AD2	Second Associated Data input
ADS	Auxiliary Data Section
AE	Authenticated Encryption
AEAD	Authenticated Encryption with Associated Data
AES	Advanced Encryption Standard
CBC	Cipher Block Chaining (mode of encryption)
CC	Cryptographic Context
CFB	Cipher Feedback (mode of encryption)
CMAC	Cipher-based Message Authentication Code
CMVP	Cryptographic Module Validation Program
cSHAKE	Customizable SHAKE
CSK	Context Sealing Key
CTR	Counter (mode of encryption)
DRBG	Deterministic Random Bit Generator
ECB	Electronic Codebook (mode of encryption)
ECC	Elliptic-Curve Cryptography
ECDH	Elliptic-Curve Diffie–Hellman
ECDSA	Elliptic-Curve Digital Signature Algorithm
EdDSA	Edwards-curve Digital Signature Algorithm
FIB	Focused Ion Beam
GCM	Galois/Counter Mode
GF	Galois Field
GR	General Rule
HMAC	Hash-based Message Authentication Code
HSM	Hardware Security Module
IND-CCA2	Indistinguishability under adaptive Chosen-Ciphertext Attack
IV	Initialization Vector
KDF	Key Derivation Function
KEM	Key Encapsulation Mechanism
KIP	Key In PI (HMAC variant)
KLE	Cryptographic Lockers Extension
KLF	Cryptographic Locker File
KLIOBUF	KLE Input/Output Buffer
KLLEN	Length in bits of a KLE vector or KLIOBUF operand
KLNL	KLE Named Locker: the locker that `klnamedlocker` names
KLS	KLE Context Status
KLV	KLE-subset of Vector Extension
KMAC	KECCAK Message Authentication Code
LST	Locality Secrets Table
MAC	Message Authentication Code
MDH	Metadata Header
ML-DSA	Module-Lattice-Based Digital Signature Algorithm
ML-KEM	Module-Lattice-Based Key-Encapsulation Mechanism
MR	Machine Rule
NIK	No Initial Key (HMAC variant)
NTT	Number-Theoretic Transform
OCB	Offset Codebook (mode of encryption)
OFB	Output Feedback (mode of encryption)
OID	Object Identifier
PCCC	Partially Configured Cryptographic Context
PI	Provisioning Input
PKE	Public-Key Encryption
POLYVAL	Polynomial hash of AES-GCM-SIV
PQC	Post-Quantum Cryptography
PRF	Pseudo-Random Function
PRP	Pseudo-Random Permutation
RBG	Random Bit Generator
RUP	Release of Unverified Plaintext
SCA	Side-Channel Analysis
SCC	Sealed Cryptographic Context
SEM	Scanning Electron Microscope
SHAKE	Secure Hash Algorithm KECCAK
SIV	Synthetic Initialization Vector
SKID	System Key Identifier
SKS	System Key Store
SM2	Chinese elliptic-curve cryptography standard (GM/T 0003, GB/T 32918)
SM3	Chinese hash function standard (GB/T 32905)
SM4	Chinese block cipher standard (GB/T 32907)
SR	Software Requirement
TBC	Tweakable Block Cipher
TEE	Trusted Execution Environment
TPM	Trusted Platform Module
XCTR	XORed Counter (mode of encryption)
XEX	XOR-Encrypt-XOR mode of operation
XOF	Extendable-Output Function
XTS	XEX-based Tweaked-codebook mode with ciphertext Stealing

Associated Data

AD2

Second Associated Data input

ADS

Auxiliary Data Section

Authenticated Encryption

AEAD

Authenticated Encryption with Associated Data

AES

Advanced Encryption Standard

CBC

Cipher Block Chaining (mode of encryption)

Cryptographic Context

CFB

Cipher Feedback (mode of encryption)

CMAC

Cipher-based Message Authentication Code

CMVP

Cryptographic Module Validation Program

cSHAKE

Customizable SHAKE

CSK

Context Sealing Key

CTR

Counter (mode of encryption)

DRBG

Deterministic Random Bit Generator

ECB

Electronic Codebook (mode of encryption)

ECC

Elliptic-Curve Cryptography

ECDH

Elliptic-Curve Diffie–Hellman

ECDSA

Elliptic-Curve Digital Signature Algorithm

EdDSA

Edwards-curve Digital Signature Algorithm

FIB

Focused Ion Beam

GCM

Galois/Counter Mode

Galois Field

General Rule

HMAC

Hash-based Message Authentication Code

HSM

Hardware Security Module

IND-CCA2

Indistinguishability under adaptive Chosen-Ciphertext Attack

Initialization Vector

KDF

Key Derivation Function

KEM

Key Encapsulation Mechanism

KIP

Key In PI (HMAC variant)

KLE

Cryptographic Lockers Extension

KLF

Cryptographic Locker File

KLIOBUF

KLE Input/Output Buffer

KLLEN

Length in bits of a KLE vector or KLIOBUF operand

KLNL

KLE Named Locker: the locker that klnamedlocker names

KLS

KLE Context Status

KLV

KLE-subset of Vector Extension

KMAC

KECCAK Message Authentication Code

LST

Locality Secrets Table

MAC

Message Authentication Code

MDH

Metadata Header

ML-DSA

Module-Lattice-Based Digital Signature Algorithm

ML-KEM

Module-Lattice-Based Key-Encapsulation Mechanism

Machine Rule

NIK

No Initial Key (HMAC variant)

NTT

Number-Theoretic Transform

OCB

Offset Codebook (mode of encryption)

OFB

Output Feedback (mode of encryption)

OID

Object Identifier

PCCC

Partially Configured Cryptographic Context

Provisioning Input

PKE

Public-Key Encryption

POLYVAL

Polynomial hash of AES-GCM-SIV

PQC

Post-Quantum Cryptography

PRF

Pseudo-Random Function

PRP

Pseudo-Random Permutation

RBG

Random Bit Generator

RUP

Release of Unverified Plaintext

SCA

Side-Channel Analysis

SCC

Sealed Cryptographic Context

SEM

Scanning Electron Microscope

SHAKE

Secure Hash Algorithm KECCAK

SIV

Synthetic Initialization Vector

SKID

System Key Identifier

SKS

System Key Store

SM2

Chinese elliptic-curve cryptography standard (GM/T 0003, GB/T 32918)

SM3

Chinese hash function standard (GB/T 32905)

SM4

Chinese block cipher standard (GB/T 32907)

Software Requirement

TBC

Tweakable Block Cipher

TEE

Trusted Execution Environment

TPM

Trusted Platform Module

XCTR

XORed Counter (mode of encryption)

XEX

XOR-Encrypt-XOR mode of operation

XOF

Extendable-Output Function

XTS

XEX-based Tweaked-codebook mode with ciphertext Stealing