Hi Werner, Thanks for providing closure on this. I've archived it, and if in the future stuff needs to be done about it, we can be a step closer.
Thanks, --Bert On 4/16/26 10:36 AM, Werner Koch wrote: > GCM aas well as all other counter modes are pretty fragile and tehre are > a lot of conditions which lead to catastrophic failures. So better > avoid GCM and use a robust mode like OCB. > > I do not considere this a bug becuase it is improper use of the > algorithms. Right, we may check whether set_iv has been used but it > won't be possible to check for nonce re-use - that is the caller's duty. > > Let us open a feature request to return a GPG_ERR_MISSING_ACTION error > if set_iv has not been used. > >
OpenPGP_signature.asc
Description: PGP signature
OpenPGP_0x1B93BFCB9DEDFAA0.asc
Description: application/pgp-keys
_______________________________________________ Gcrypt-devel mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gcrypt-devel
