Is it a severe security issue using a short-lived dynamic key for both AES-CTR and AES-CMAC?

CMAC is generated on the cleartext and 32 bit of it are attached to the message (MAC-and-Encrypt)

The key exchange ensures that dynamic key and NONCE values are never in the clear on the wire.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.