2
$\begingroup$

Is it a severe security issue using a short-lived dynamic key for both AES-CTR and AES-CMAC?

CMAC is generated on the cleartext and 32 bit of it are attached to the message (MAC-and-Encrypt)

The key exchange ensures that dynamic key and NONCE values are never in the clear on the wire.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.