[cryptography] "Combined" cipher modes

Tue Apr 3 12:22:50 PDT 2012

On Tue, Apr 3, 2012 at 12:02 PM, Wyss, Felix <Felix.Wyss at inin.com> wrote:
>...
> Maybe being conservative is warranted: http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/comments/CWC-GCM/Ferguson2.pdf

don't use GCM wrong?  short tags are bad. changing tag lengths are
bad. use 128bit tags.

reminds me of CTR mode arguments...
_______________________________________________
cryptography mailing list
cryptography at randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography

----- End forwarded message -----
-- 
Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE