3 ms·
A naked GHASH is not a secure MAC; the key can be reverse engineered from the value. So it's encrypted to make the tag.
by colmmacc 8y ago
A naked GHASH is not a secure MAC; the key can be reverse engineered from the value. So it's encrypted to make the tag.