RFC Errata System <[email protected]> writes: >The following errata report has been submitted for RFC5288, "AES Galois >Counter Mode (GCM) Cipher Suites for TLS".
I think the erratum needs an erratum. Firstly, "nonce" doesn't mean "number used once", and secondly nonce re-use in AES-GCM doesn't just result in "catastrophic failure of it's authenticity", it results in catastrophic failure of the entire mode, both confidentiality and integrity/authenticity. Peter. _______________________________________________ TLS mailing list [email protected] https://www.ietf.org/mailman/listinfo/tls
