search

ankane / lockbox

Modern encryption for Ruby and Rails
MIT License
1.44k stars 68 forks source link

GCM-SIV #177

Closed jmanico closed 1 year ago

jmanico commented 1 year ago

GCM-SIV mode makes nonce management a lot easier and more secure. Any plans to support it?

https://en.wikipedia.org/wiki/AES-GCM-SIV

ankane commented 1 year ago

Hi @jmanico, maybe when it’s more widely available as part of OpenSSL in the future. Users can currently use XSalsa20 if they don’t want to worry about nonce collisions (it doesn’t provide misuse resistance, but the nonce length makes it unnecessary).

https://github.com/openssl/openssl/issues/16721