Right now we only have a good single block test for GCTR. I don't recall where we got the test case but it would really benefit us to have another test case for this spanning multiple blocks. I suspect we might not be incrementing the counter correctly.
Right now we only have a good single block test for GCTR. I don't recall where we got the test case but it would really benefit us to have another test case for this spanning multiple blocks. I suspect we might not be incrementing the counter correctly.
https://github.com/pluto/aes-proof/blob/2d571a4eb63b9d80f4caa7640719d1f47ef34f97/circuits/test/aes-gcm/gctr.test.ts#L5-L22