Hot answers tagged


It depends on the attack model. In certain (realistic!) attack models, such as the one used for the BEAST and related attacks on TLS, security breaks down further—it becomes possible to decrypt messages in a byte-by-byte fashion! This is not specific to NORX; any online authenticated encryption scheme will be vulnerable to the CPSS attack if misused ...

Only top voted, non community-wiki answers of a minimum length are eligible