4
votes
What best to put in unused nonce bytes when using AES-GCM-SIV
In short yes, nonces just need to be unique. Just zeroing "leftover" bytes is fine if your protocol can guarantee uniqueness with fewer bytes. In protocols the zero bytes are often ...
- 92.6k
1
vote
Accepted
ChaCha20-Poly1305 and AES-GCM-SIV output size
I managed to free up just a little bit more than double the available space per message, so I can safely add a 128-bit tag so that we can have authenticated encryption.
The choice I am going to make ...
- 43
1
vote
Accepted
Deterministic salt for KDF
HKDF doesn't require a salt. It does make the HKDF stronger, but in principle you can just use it without salt (or, if you're not sure, with an unreliable salt).
The salt is mainly there required when ...
- 92.6k
Only top scored, non community-wiki answers of a minimum length are eligible