2
votes
1answer
84 views

Flaw in the security definition of Stateful Length-Hiding Authenticated Encryption (sLHAE)?

In the paper On the Security of the TLS Protocol: A Systematic Analysis, the authors define the notion of a stateful length-hiding authenticated encryption scheme (sLHAE). For the purpose of this ...