Filippo Valsorda personal blog

I want XAES-256-GCM/11

I want the extended-nonce 256-bit reduced-rounds XAES-256-GCM/11 AEAD. It has infinitely randomizable nonces, a comfortable margin of multi-user security, and nearly the same performance as AES-128-GCM. Only issue is that it doesn’t exist.
Points
146
HN comments
100
Submissions
1
Cited by
0 commenters

Security & PrivacySoftware Engineering2023

On Hacker News

SubmittedTitle on HNPointsComments
Jul 6, 2023I want XAES-256-GCM/11 by harporoeder146100

More from Filippo Valsorda

All 26 posts →

Related posts from the same era