Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 33557

Deprecated tag, see tag info. Advanced Encryption Standard Galois/Counter Mode, better known as AES-GCM is a mode of operation for symmetric key cryptographic block ciphers that has been widely adopted because of its efficiency and performance. GCM supports authenticated encryption, meaning that the mode not only offers privacy, but also integrity.

4 votes
Accepted

Why this complexity defining AES-GCM counter block?

Knowing that it does not need to be secret and its only required property is to be unique, why not use a 128 bits true random number for the whole block? The counter instead of starting at 0 will s …
Luis Casillas's user avatar
0 votes

Using a hash of data instead of the full raw data for authenticated data in AES-GCM

In theory, hashing the data before passing it in as AAD doesn't gain you anything. You do mention a practical consideration (my boldface): And using the hash means I can create the associated dat …
Luis Casillas's user avatar
8 votes

What are the actual merits of Galois/Counter Mode?

First of all, GCM is a form of counter mode. Which means that unlike with e.g. cipher block chaining, the output of one block depends on exactly one block of input. Worse, yet: You can modify a sin …
Luis Casillas's user avatar
4 votes
Accepted

The Rationale behind NIST's counter/LFSR recommendation on deterministic IV constructions on...

I can't tell whether this is what motivated NIST, but I found a paper that has an argument for LFSR counters in some applications: Mukhopadhyay, Sourav and Palash Sarkar. 2006. "Application of LFSRs …
Luis Casillas's user avatar