Tag
aead
- May 12, 2026 The TLS Record Layer: Framing, Fragmentation, and Sequence Numbers How application bytes become protected records: the five-byte header, the 16 KiB fragment limit, implicit sequence numbers, and how the AEAD nonce is assembled. internet protocols
- Jan 22, 2026 Nonce Construction and the Reuse Limits of AEAD Why an AEAD nonce must be unique per key, how counter, random, and XOR-based constructions differ in what they assume, and what a repeated nonce reveals. cryptography
- Dec 3, 2025 AEAD Usage Limits and the KeyUpdate Handshake Why a TLS 1.3 key has a byte budget as well as a record budget, where the numbers come from, and what happens when a connection outlives its key. internet protocols
- Oct 6, 2025 GHASH and the Structure of a GCM Tag Why the authenticator is a polynomial evaluation in a binary field rather than a chained MAC, how the length block prevents padding ambiguity, and what tag truncation costs in forgery probability. cryptography
- Jan 17, 2025 The Release of Unverified Plaintext Problem in AEAD APIs Why a decryption function that returns plaintext before the tag is checked reintroduces chosen-ciphertext attacks, and how streaming interfaces force the verification decision into the caller. cryptography
- Jul 18, 2024 Key Commitment and Why an AEAD Can Decrypt Under Two Keys AEAD schemes are not committing by default, so a ciphertext forged to verify under two different keys splits the receiver into two views of the same message, with consequences for key rotation and message franking. cryptography
- Feb 17, 2024 CCM: Combining a MAC and a Counter Inside One Mode How CCM derives a CTR nonce, a CBC-MAC IV, and a length-encoded authentication header to authenticate before encrypting, and what the two passes and the 16-byte block size cost. cryptography
- Jul 19, 2023 SIV and the Two-Pass Design of a Misuse-Resistant AEAD How deriving the nonce from the plaintext with a keyed hash removes the catastrophic failure of nonce reuse, at the cost of a second pass and the loss of streaming encryption. cryptography