Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Correct. However, some implementations actually incorrectly refer to the nonce as an "IV" (initialization vector), where it's not so obvious.

Also, it's not entirely clear just how bad a reuse actually is. For example, in AES-CBC, reusing the IV has much less impact than reusing the nonce with AES-GCM.



NIST calls it an IV (or at least did when it came out).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: