I'm looking at a protocol which adds the IV (used for the encryption) into the AAD.
If the IV (which is part of the message) was incorrect, decryption would fail anyway.
Why is it useful to add the IV to AES256-GCM's AAD?
Is it actively harmful?
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.Sign up to join this community