Skip to content

Commit

Permalink
Script updating gh-pages from 9aec020. [ci skip]
Browse files Browse the repository at this point in the history
  • Loading branch information
ID Bot committed Jan 5, 2025
1 parent c5b4418 commit b6097cb
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
2 changes: 1 addition & 1 deletion proofreading/draft-irtf-cfrg-aegis-aead.html
Original file line number Diff line number Diff line change
Expand Up @@ -3602,7 +3602,7 @@ <h4 id="name-key-and-nonce-selection">
<p id="section-10.1.1-1">All AEGIS variants <span class="bcp14">MUST</span> be used in a nonce-respecting setting: for a given <code>key</code>, a <code>nonce</code> <span class="bcp14">MUST</span> only be used once, even with different <code>tag</code> lengths. Failure to do so would immediately reveal the bitwise difference between two messages.<a href="#section-10.1.1-1" class="pilcrow"></a></p>
<p id="section-10.1.1-2">Every key <span class="bcp14">MUST</span> be randomly chosen from a uniform distribution.<a href="#section-10.1.1-2" class="pilcrow"></a></p>
<p id="section-10.1.1-3">The nonce <span class="bcp14">MAY</span> be public or predictable. It can be a counter, the output of a permutation, or a generator with a long period.<a href="#section-10.1.1-3" class="pilcrow"></a></p>
<p id="section-10.1.1-4">With AEGIS-128L and AEGIS-128X, random nonces can safely encrypt up to 2<sup>48</sup> messages using the same key with negligible (~ 2<sup>-33</sup>, to align with NIST guidelines) collision probability.<a href="#section-10.1.1-4" class="pilcrow"></a></p>
<p id="section-10.1.1-4">With AEGIS-128L and AEGIS-128X, random nonces can safely encrypt up to 2<sup>48</sup> messages using the same key with negligible (~2<sup>-33</sup>, to align with NIST guidelines) collision probability.<a href="#section-10.1.1-4" class="pilcrow"></a></p>
<p id="section-10.1.1-5">With AEGIS-256 and AEGIS-256X, random nonces can be used with no practical limits.<a href="#section-10.1.1-5" class="pilcrow"></a></p>
</section>
</div>
Expand Down
4 changes: 2 additions & 2 deletions proofreading/draft-irtf-cfrg-aegis-aead.txt
Original file line number Diff line number Diff line change
Expand Up @@ -1849,8 +1849,8 @@ return tag
output of a permutation, or a generator with a long period.

With AEGIS-128L and AEGIS-128X, random nonces can safely encrypt up
to 2^48 messages using the same key with negligible (~ 2^-33, to
align with NIST guidelines) collision probability.
to 2^48 messages using the same key with negligible (~2^-33, to align
with NIST guidelines) collision probability.

With AEGIS-256 and AEGIS-256X, random nonces can be used with no
practical limits.
Expand Down

0 comments on commit b6097cb

Please sign in to comment.