From 7872bbcaf421bbb2fd3ab5fb1283e9cb8282a02f Mon Sep 17 00:00:00 2001
From: cyfraeviolae
@@ -37,9 +39,10 @@
Nonce
reuse. Due to rising entropy prices, Roseacrucis has
- started to reuse nonces. You must perform the Forbidden Attack in order to
+ started to reuse AES-GCM nonces. You must perform the Forbidden Attack in order to
recover the authentication key and forge arbitrary ciphertext.
@@ -64,6 +68,7 @@
AES-GCM is a block cipher that accepts a key of 16 bytes,
a nonce of 12 bytes, plaintext, and additional authenticated data.
It returns ciphertext and a message authentication code (MAC).
+ The construction is specified by NIST.
The ciphertext is computed as in counter mode, whereas the MAC is computed using the algorithm GMAC. -- cgit v1.2.3