top | item 40656193

(no title)

frereit | 1 year ago

Correct. However, some implementations actually incorrectly refer to the nonce as an "IV" (initialization vector), where it's not so obvious.

Also, it's not entirely clear just how bad a reuse actually is. For example, in AES-CBC, reusing the IV has much less impact than reusing the nonce with AES-GCM.

discuss

order

kbolino|1 year ago

NIST calls it an IV (or at least did when it came out).