3 ms·
But… Poly1305 has the same "problem"…
by loup-vaillant 10y ago
But… Poly1305 has the same "problem"…
- tptacek 10y agoGuttman's wording here is imprecise. GCM and Poly1305 are not comparably brittle. Both have nonce misuse issues, but GCM has additional problems. See: https://news.ycombinator.com/item?id=13384762 https://news.ycombinator.com/item?id=13384762