New answers tagged


If I understand correctly: You have a 256-bit master key $K0$ Generate a random 128-bit value $N0$ and set the last bit to 0 Generate a 256-bit keystream $K1$ using $E_{K0}(N0)$ || $E_{K0}(N0 \oplus 1)$ Generate a random 96-bit value $N1$ Using $K1$ as the key, and $N1$ as the nonce, encrypt your message with AES256-GCM, and authenticate $N0$ as associated ...

Top 50 recent answers are included