1
The XAES-256-GCM extended-nonce AEAD
XAES-256-GCM is a new AEAD extended-nonce algorithm designed for high-level APIs and FIPS 140 compliance.
Filippo Valsorda
We now know how the seeds of the NIST elliptic curves were generated: they’re not the hash of some saucy sentence, but the output of drand48() seeded with the time, which was indeed in 1997–98.
- Popular posts
- 26
- Total points
- 6,821
- HN comments
- 2,464
- Rank
- #137 personal
Visit words.filippo.io → RSS feedOn Hacker News Jan 2022 – Oct 2026
Security & Privacy 20Programming Languages 5Software Engineering 4Open Source 4Math & Algorithms 4Tools & Productivity 3
2
Go.sum is not a lockfile
In Go, go.mod acts as both manifest and lockfile. There is never a reason to look at go.sum.
3
I want XAES-256-GCM/11
I want the extended-nonce 256-bit reduced-rounds XAES-256-GCM/11 AEAD. It has infinitely randomizable nonces, a comfortable margin of multi-user security, and nearly the same performance as AES-128-GCM. Only issue is that it doesn’t exist.
4
A Cryptographic Near Miss
A recent issue in scalar multiplication makes for a good case study of how unsafe interfaces, undocumented assumptions, and time lead to vulnerabilities.