On Wed, 24 Dec 2025 00:40:05 GMT, Artur Barashev <[email protected]> wrote:
> 12 bytes is the recommended size for GCM per NIST SP 800-38D: > > For IVs, it is recommended that implementations restrict support to the > length of 96 bits, to > promote interoperability, efficiency, and simplicity of design.` > > Larger IV size requires an extra hashing step (GHASH). Currently we have it > set to 16 bytes. Marked as reviewed by [email protected] (no known OpenJDK username). ------------- PR Review: https://git.openjdk.org/jdk/pull/28971#pullrequestreview-3609719024
