3 ms·
Yes, many and a lot. High quality random sources are not a general availability, for example in small devices. The best would be to have a strong random nonce
by emilfihlman 8y ago
Yes, many and a lot. High quality random sources are not a general availability, for example in small devices.
The best would be to have a strong random nonce and a counter, or some combination of these, for example 64 bit counter appended to a 192 bit random vector.
Even just a 64 bit sequential counter would last almost 600 years at 10^9 encryption operations per second.