On Tue, Nov 12, 2013 at 9:17 PM, Niels Möller <[email protected]> wrote: > As I wrote, I'm working with poly1305. One question: The _digest > function will update the nonce value, so that by default one gets a > nonce sequence of 0, 1, 2, .... In the code I'm working with > (contributed by Nikos), this increment is done in a big-endian fashion, > just like increments for CTR mode. > Is this going to be the common way to generate nonces for poly1305?
There is no common way as poly1305-aes isn't used in any standard (that I know) yet. There is: draft-agl-tls-chacha20poly1305-03, but it uses a very different construction than the poly1305-aes. regards, Nikos _______________________________________________ nettle-bugs mailing list [email protected] http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs
