Closed martinduke closed 6 years ago
At the moment, the AES-CTR nonce is (scid_len - sid_len). This should really be 16 Bytes.
After some discussions with Kazuho and others, I believe that an 8 Byte nonce is sufficient.
At the moment, the AES-CTR nonce is (scid_len - sid_len). This should really be 16 Bytes.