[noise] AES-SIV vs AES-GCM

Arvid Picciani aep at exys.org
Thu Sep 27 00:12:33 PDT 2018


the authors of this paper claim their cipher is more misuse resistant than gcm.

https://eprint.iacr.org/2017/168.pdf
https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-05

Does it make any sense to look at this in the context of noise?
I stumbled upon this trying to find a good implementation of aes-gcm for rust.


More information about the Noise mailing list