2 ms·
My impression is that it was NSA/NIST's AES specification process that made it "officially OK" to stop worrying about known plaintext. But really we need to as
by marshray 13y ago
My impression is that it was NSA/NIST's AES specification process that made it "officially OK" to stop worrying about known plaintext.
But really we need to ask some the folks older than I am. It would be a good question for the randombit or metzdowd crypography lists. Also, I'll tweet at Bellovin.
Edit: https://twitter.com/marshray/status/376600321637638144 https://twitter.com/marshray/status/376600321637638144