4 ms·
Why? A 32-bit block counter allows for 256GB messages. As AEAD messages shouldn't be decrypted in a "streaming" fashion (lest one return unauthenticated plainte
by agl 13y ago
Why? A 32-bit block counter allows for 256GB messages. As AEAD messages shouldn't be decrypted in a "streaming" fashion (lest one return unauthenticated plaintext), that seems more than sufficient.
(We don't have a good spec for composing AEAD operations for chunking large messages yet, however.)
- tptacek 13y agoYeah, I see why it works in this setting, it's just ugly; it's a parameter that is only really safe for this algorithm and in this service model. You started with 64/64 for a reason. :)