Tag Info

For most purposes, you probably don't need to provide confidentiality protection for the version field. There may be some settings where the version field allow traffic analysis, and to analyze that, we'd need to know so much detailed information about your particular protocol that the question would probably become too localized to be a good fit for this ...

To allow effective cryptanalysis of a scheme, two things must be clear: first, our goal (e.g., what we want to keep secret, what we want to preserve the integrity of, etc.), and second, what the attacker(s) are allowed to know or do. So, our goal is to preserve the secrecy of $m_1$, I take it. So, the attacks will try to find it. Now, what can the ...