Aaron Zauner <[email protected]> writes: >What do you think nonce stands for? >https://en.wikipedia.org/wiki/Cryptographic_nonce
Well there's your first mistake, you're using Wikipedia as a reference. "nonce" is from medieval English, and predates modern cryptography and IVs by about 800 years. >In TLS nonce reuse allows us to attack the authentication key of GCM. Not the >actual master secret. There's no direct break of the confidentiality, If you reuse the IV/nonce in GCM (or more specifically CTR mode), you repeat the cipher stream. An XOR makes it go away, so you lose any confidentiality. Peter. _______________________________________________ TLS mailing list [email protected] https://www.ietf.org/mailman/listinfo/tls
