pitrou commented on PR #259: URL: https://github.com/apache/parquet-format/pull/259#issuecomment-2152467402
> The ultimate source of this Parquet limitation is the NIST spec, section 8.3 (more specifically, this text : "_The total number of invocations of the authenticated encryption function shall not exceed 2^32, including all IV lengths and all instances of the authenticated encryption function with the given key_"). The Parquet spec can ref/site this text, but shouldn't supply an explanation (must be very careful here - best be left to the official NIST explanation in the section 8 and in the referenced papers). Two things: 1. Our reference to the NIST doc should not misleading. In particular, the current wording makes it seem like 2^32 is some kind of binary threshold above which encryption is broken. This is not the case. 2. IMHO, when it comes to crypto (or security in general), it's good to promote understanding of the reasons behind the rules, rather than just the rules themselves. But I admit there can be other viewpoints, so will leave it to you or other people to decide. @rdblue @zivanfi @gszadovszky -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
