6 ms·
> The "nonce" bits of the AES-CTR must be random Huh? This is not an IV, the only hard requirement is that it be unique. What am I missing?
by pbsd 12y ago
> The "nonce" bits of the AES-CTR must be random
Huh? This is not an IV, the only hard requirement is that it be unique. What am I missing?
- tptacek 12y agoYou're not missing anything; I wrote that comment in haste, as you can tell from the grammar errors. The CTR nonce doesn't need to be random. The interface is still treacherous!