Skip to content

Commit

Permalink
additional data -> associated data
Browse files Browse the repository at this point in the history
  • Loading branch information
jedisct1 committed Jan 20, 2024
1 parent 978695d commit 5bd83fc
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion draft-irtf-cfrg-aegis-aead.md
Original file line number Diff line number Diff line change
Expand Up @@ -1604,7 +1604,7 @@ AEGIS-256 offers 256-bit message security against plaintext and state recovery,

Under the assumption that the secret key is unknown to the attacker, all AEGIS variants target 128-bit security against forgery attacks regardless of the tag size.

Encrypting the same message with the same key and nonce but different additional data generates distinct ciphertexts that do not reveal any additional information about the message.
Encrypting the same message with the same key and nonce but different associated data generates distinct ciphertexts that do not reveal any additional information about the message.

AEGIS has been shown to have reforgeability resilience in {{FLLW17}}. Without the ability to set the associated data, a successful forgery does not increase the probability of subsequent forgeries.

Expand Down

0 comments on commit 5bd83fc

Please sign in to comment.