Skip to content

encrypting nonce between client and server #1197

Answered by jedisct1
nmarandi asked this question in Q&A
Discussion options

You must be logged in to vote

Bellare recently published a paper about this: https://eprint.iacr.org/2019/624.pdf

But maybe you should explain the problem you are trying to solve first.

With 192-bit nonces, you can safely use random nonces instead of a counter. A middle box would learn nothing from such nonces.

Replies: 2 comments 1 reply

Comment options

You must be logged in to vote
1 reply
@nmarandi
Comment options

Answer selected by nmarandi
Comment options

You must be logged in to vote
0 replies
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants
Converted from issue

This discussion was converted from issue #1196 on July 11, 2022 07:14.