Commits on Mar 27, 2024

1. ocb3: restrict minimum NonceSize to U6 …

   Based on the recommendations of the following paper, which describes an
   attack against OCB3 mode:
   
   https://eprint.iacr.org/2023/326.pdf
   
   > In the case of OCB3, it is easy to fix the algorithm’s specification
   > in order to avoid the weakness and abide to the full assumptions of
   > the security proof. If the description is unchanged, the requirement
   > N ≥ 6 must become an absolute requirement.
   
   Furthermore, this restricts the minimum tag size to 1-byte, up from the
   former 0-bytes. This is a questionable choice of minimum but reflects
   the wording in the RFC:
   
   > The TAGLEN parameter specifies the length of authentication tag used
   > by OCB and may be any value up to 128

   

   tarcieri committed Mar 27, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 362e3a4
   • Browse repository at this point

   Copy the full SHA

   362e3a4 View commit details

   Browse the repository at this point in the history