Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

They both have exactly the same confidentiality issue (because both use CTR mode) but the forgery issue is specific to GCM as a single successful forgery leads to infinitely many. With truncated tags this is a real issue. But with big tags both have pretty much the same "good for counting, terrible if you can't" behaviour.


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: