rfc-8452

AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption

S. Gueron, A. Langley, Y. Lindell

date2019-04 streamIRTF statusINFORMATIONAL pages42 canonicalhttps://www.rfc-editor.org/rfc/rfc8452 doi10.17487/RFC8452 errataview

This memo specifies two authenticated encryption algorithms that are nonce misuse resistant -- that is, they do not fail catastrophically if a nonce is repeated. This document is the product of the Crypto Forum Research Group.