soatok / experimental-caead

Experimental committing AEAD designed by Soatok.

Hi, I'm Soatok!

I'm a gay furry computer programmer with a dhole fursona.

Everything I publish on this Github account is strictly for fun, and usually intended to benefit the furry and LGBTQIA+ communities.

I write a lot about the furry fandom, computer security, and cryptography on my blog, Dhole Moments.

Stickers by Lynx vs Jackalope

experimental-caead's Issues

Authentication passes with an incorrect nonce

I may be wrong, but it looks like authentication can pass when the first 160 bits of the nonce are correct but the last 96 bits are not because that latter part of the nonce is not in the key derivation or authentication tag calculation.

A solution would be to include the entire nonce as part of the key derivation. I'm currently working on an Internet Draft that discusses that.