Questions tagged [misuse-resistant]

For questions about design decisions of schemes and implementations of cryptographic primitives to make them resistant to misuse.

Filter by
Sorted by
Tagged with
0
votes
0answers
138 views

Can I Achieve Deterministic Encryption Using AES-GCM with Nonce = HMAC [ message ]

I would like to implement a deterministic encryption scheme within .NET. From the following post it is established using AES-SIV mode is appropriate. As AES-SIV mode is not implemented within the ...
3
votes
1answer
216 views

Is XTS-AES a NIST-approved nonce-misuse-resistant AES mode?

If I use XTS-AES and treat the tweak as a nonce/IV would the result be considered nonce-misuse-resistant? I'm thinking of something like the following AEAD-like scheme: ...
1
vote
0answers
77 views

Misuse-resistant ephemeral key exchange?

This recent question had me the idea to ask: is there a "misuse-resistant ephemeral key exchange"? At first sight, this seemed self-contradictary - ephemeral implies there's a random part, while ...
4
votes
1answer
1k views

Is XChaCha20-Poly1305 nonce misuse-resistant?

In the Libsodium v1.0.12 and v1.0.13 Security Assessment one can read The ChaCha20-Poly1305 implementation combines a stream cipher and is resistant to timing attacks by design. In addition, this ...