3 ms·
>(2⁸⁰ messages with collision risk 2⁻³²) Would there be an issue before that due to the fact that the AES block size is only 128 bits?
by upofadown 2y ago
>(2⁸⁰ messages with collision risk 2⁻³²)
Would there be an issue before that due to the fact that the AES block size is only 128 bits?
- Retr0id 2y agoNo (it's difficult to give a more detailed answer than that, without more detail on why you think it'd be an issue)
- FiloSottile 2y agoAssuming you’re referring to the birthday bound on blocks (https://sweet32.info https://sweet32.info) that’s a limit on blocks encrypted with a single key. XAES derives large keys per message, so it achieves what are commonly referred to as “better-than-birthday” bounds.