4 ms·
All of his problems with GCM are fixed in the recent modification, GCM-SIV. Can't standards bodies just add that?
by swordswinger12 11y ago
All of his problems with GCM are fixed in the recent modification, GCM-SIV. Can't standards bodies just add that?
- tptacek 11y agoGCM and GCM-SIV are different constructions. GCM-SIV isn't the latest version of GCM. GCM-SIV is good, but it doesn't address all the problems of GCM. You still need hardware support to get a safe, efficient GCM-SIV. GCM-SIV is also way more complicated than Chacha20+Poly1305.
- swordswinger12 11y agoIt's clear that they're different constructions. The two papers don't even share an author. Why do you need hardware support for GCM-SIV?