H(m)⊕r
If we have a working PRG, we should take advantage of it to avoid disclosing repeated messages.
-
-
sure, but you can mix randomness into a SIV mode's nonces
-
We don’t need to force implementations to use this construction. We just need a nonce.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.